CVE-2015-0006
- State
- Published
- Severity
- Not scored
- Published
- Jan 13, 2015
- Updated
- Aug 6, 2024
- Reserved
- Nov 18, 2014
Description
The Network Location Awareness (NLA) service in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 does not perform mutual authentication to determine a domain connection, which allows remote attackers to trigger an unintended permissive configuration by spoofing DNS and LDAP responses on a local network, aka "NLA Security Feature Bypass Vulnerability."
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 62184third-party-advisory
- MS15-005vendor-advisory
- 71930vdb-entry
- win-ms15kb3022777-update(99522)vdb-entry
- 62098third-party-advisory
- ms-nla-cve20150006-security-bypass(99521)vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.