CVE-2013-0005: Input Validation
The WCF Replace function in the Open Data (aka OData) protocol implementation in Microsoft .NET Framework 3.5, 3.5 SP1, 3.5.1, and 4, and the Management OData IIS Extension on Windows Server 2012, allows remote attackers to cause a denial of service (resource consumption and daemon restart) via crafted values in HTTP requests, aka "Replace Denial of Service Vulnerability."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-0005?
CVE-2013-0005 has a severity rating that indicates a potential denial of service vulnerability affecting specific versions of Microsoft .NET Framework and the Management OData IIS Extension.
How do I fix CVE-2013-0005?
To fix CVE-2013-0005, you should update your Microsoft .NET Framework or Management OData IIS Extension to the latest security patches provided by Microsoft.
Which systems are affected by CVE-2013-0005?
CVE-2013-0005 affects Microsoft .NET Framework versions 3.5, 3.5 SP1, 3.5.1, and 4, as well as the Management OData IIS Extension on Windows Server 2012.
What kind of attacks are possible with CVE-2013-0005?
CVE-2013-0005 allows remote attackers to potentially cause a denial of service through resource consumption and daemon restarts.
Is there a workaround for CVE-2013-0005?
While it is recommended to apply the available security updates, in the meantime, limiting access to the affected services may mitigate the risk associated with CVE-2013-0005.