« Volver al listado

CVE-2011-2008

Estado: ModificadaMedia (5)—

Microsoft Host Integration Server (HIS) 2004 SP1, 2006 SP1, 2009, and 2010 allows remote attackers to cause a denial of service (SNA Server service outage) via crafted TCP or UDP traffic, aka "Access of Unallocated Memory DoS Vulnerability."

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Microsoft — Host Integration Server

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2011-2008",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "secure@microsoft.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2011-10-12T02:52:43.987",
  "references": [
    {
      "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-082",
      "source": "secure@microsoft.com"
    },
    {
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12915",
      "source": "secure@microsoft.com"
    },
    {
      "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-082",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12915",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Microsoft Host Integration Server (HIS) 2004 SP1, 2006 SP1, 2009, and 2010 allows remote attackers to cause a denial of service (SNA Server service outage) via crafted TCP or UDP traffic, aka \"Access of Unallocated Memory DoS Vulnerability.\""
    },
    {
      "lang": "es",
      "value": "Microsoft Host Integration Server (HIS) 2004 SP1, 2006 SP1, 2009 y 2010 permite a atacantes remotos provocar una denegación de servicio (Interrupción del servicio del SNA Server) a través de tráfico TCP o UDP específicamente modificado. También conocida como \"Vulnerabilidad de denegación de servicio por acceso a memoria no asignada\"."
    }
  ],
  "lastModified": "2026-06-16T23:30:35.650",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:microsoft:host_integration_server:2004:sp1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9FA8CF8C-19D9-48AC-B46C-101D9179E3A5"
            },
            {
              "criteria": "cpe:2.3:a:microsoft:host_integration_server:2006:sp1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CC3C3937-3891-4FF4-99D5-E620FE2510CA"
            },
            {
              "criteria": "cpe:2.3:a:microsoft:host_integration_server:2009:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1E2DC41B-4C07-44AB-8DFC-4DE841B70AA7"
            },
            {
              "criteria": "cpe:2.3:a:microsoft:host_integration_server:2010:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "59B1BEFA-4C20-48BC-B621-95CE94FCFDFB"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "secure@microsoft.com"
}