Windows NFS server vulnerability could allow denial of service
Report ID: MS201302006
Date Published: 22 February 2013
Criticality: Important
Compromise Type: denial-of-service
Compromise From: remote
Affected Product/Component:
Windows Server 2008 R2
Windows Server 2012
Summary
A vulnerability in Windows NFS server could allow an attacker to cause an affected system to stop responding and restart.
Detailed Description
Microsoft has issued a security update to resolve a vulnerability in Windows NFS server. The vulnerability was caused by improper handling of a file operation, and can be exploited into causing an affected system to stop responding and restart.
This issue has been fixed through the update where a correction on how NFS server handles a file operation has been made. Users are recommended to install the latest update onto their machine as a protection measure against potential exploit attempts.
CVE Reference
CVE-2013-1281
Solution
Install the latest security patch for applicable system, available for download from (https://technet.microsoft.com/en-us/security/bulletin/ms13-014)
F-Secure Health Check
F-Secure's free tool, the Health Check, detects if your system is missing the patch for the vulnerability covered in this report.
