NVD

Id
29217  
Name
CVE-2014-0317  
Description
The Security Account Manager Remote (SAMR) protocol implementation in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows Server 2012 Gold and R2 does not properly determine the user-lockout state, which makes it easier for remote attackers to bypass the account lockout policy and obtain access via a brute-force attack, aka "SAMR Security Feature Bypass Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
5.4  
Severity
Medium  
CVSS Base Score
5.4  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:N/I:C/A:N)  
Pub Date
2017-01-19  
Published
2014-03-12  
Modified Date
2014-03-12  
Seq
2014-0317  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
154853 29217 CVE-2014-0317 MS14-016  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
12763 JVNDB-2014-001638 複数の Microsoft Windows 製品の Security Account Manager Remote プロトコルの実装におけるアカウントロックアウトポリシーを回避される脆弱性 複数の Microsoft Windows 製品の Security Account Manager Remote (SAMR) プロトコルの実装は、ユーザのロックアウト状態を適切に判定しないため、アカウントロックアウトポリシーを回避され、アクセス権を取得される脆弱性が存在します。 CVE-2014-0317 67718 CVE-2014-0317 29217 5.4 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-001638.html 2014-03-11 2014-03-13 View