« Volver al listado

CVE-2011-2007

Estado: ModificadaMedia (5)—

Microsoft Host Integration Server (HIS) 2004 SP1, 2006 SP1, 2009, and 2010 allows remote attackers to cause a denial of service (SNA Server service outage) via crafted TCP or UDP traffic, aka "Endless Loop DoS in snabase.exe Vulnerability."

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Microsoft — Host Integration Server

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2011-2007",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "secure@microsoft.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2011-10-12T02:52:43.957",
  "references": [
    {
      "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-082",
      "source": "secure@microsoft.com"
    },
    {
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13040",
      "source": "secure@microsoft.com"
    },
    {
      "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-082",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13040",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Microsoft Host Integration Server (HIS) 2004 SP1, 2006 SP1, 2009, and 2010 allows remote attackers to cause a denial of service (SNA Server service outage) via crafted TCP or UDP traffic, aka \"Endless Loop DoS in snabase.exe Vulnerability.\""
    },
    {
      "lang": "es",
      "value": "Microsoft Host Integration Server (HIS) 2004 SP1, 2006 SP1, 2009 y 2010 permite a atacantes remotos provocar una denegación de servicio (SNA Server interrupción del servicio) a través de tráfico TCP o UDP específicamente modificado. También conocida como \"Vulnerabilidad de denegación de servicio por bucle infinito en snabase.exe\"."
    }
  ],
  "lastModified": "2026-06-16T23:30:35.550",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:microsoft:host_integration_server:2004:sp1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9FA8CF8C-19D9-48AC-B46C-101D9179E3A5"
            },
            {
              "criteria": "cpe:2.3:a:microsoft:host_integration_server:2006:sp1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CC3C3937-3891-4FF4-99D5-E620FE2510CA"
            },
            {
              "criteria": "cpe:2.3:a:microsoft:host_integration_server:2009:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1E2DC41B-4C07-44AB-8DFC-4DE841B70AA7"
            },
            {
              "criteria": "cpe:2.3:a:microsoft:host_integration_server:2010:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "59B1BEFA-4C20-48BC-B621-95CE94FCFDFB"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "secure@microsoft.com"
}