NVD

Id
22548  
Name
CVE-2015-0006  
Description
The Network Location Awareness (NLA) service in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 does not perform mutual authentication to determine a domain connection, which allows remote attackers to trigger an unintended permissive configuration by spoofing DNS and LDAP responses on a local network, aka "NLA Security Feature Bypass Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
6.1  
Severity
Medium  
CVSS Base Score
6.1  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
6.5  
CVSS Vector
(AV:A/AC:L/Au:N/C:N/I:C/A:N)  
Pub Date
2017-01-19  
Published
2015-01-13  
Modified Date
2017-01-02  
Seq
2015-0006  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
119471 22548 CVE-2015-0006 62098  View
119472 22548 CVE-2015-0006 62184  View
119473 22548 CVE-2015-0006 MS15-005  View
119474 22548 CVE-2015-0006 71930  View
119475 22548 CVE-2015-0006 ms-nla-cve20150006-security-bypass(99521)  View
119476 22548 CVE-2015-0006 win-ms15kb3022777-update(99522)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
5713 JVNDB-2015-001033 複数の Microsoft Windows 製品の Network Location Awareness サービスにおける意図しない許容設定を誘発される脆弱性 複数の Microsoft Windows 製品の Network Location Awareness (NLA) サービスは、ドメイン接続を決める相互認証を行わないため、意図しない許容設定を誘発される脆弱性が存在します。 CVE-2015-0006 77217 CVE-2015-0006 22548 6.1 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-001033.html 2015-01-13 2015-01-15 View