CVE-2014-0317: Input Validation
The Security Account Manager Remote (SAMR) protocol implementation in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows Server 2012 Gold and R2 does not properly determine the user-lockout state, which makes it easier for remote attackers to bypass the account lockout policy and obtain access via a brute-force attack, aka "SAMR Security Feature Bypass Vulnerability."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-0317?
CVE-2014-0317 has a severity rating of important.
How do I fix CVE-2014-0317?
To fix CVE-2014-0317, apply the security updates provided by Microsoft for the affected versions of Windows.
Which versions of Windows are affected by CVE-2014-0317?
CVE-2014-0317 affects Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, and Windows Server 2012.
What type of vulnerability is CVE-2014-0317?
CVE-2014-0317 is a user-lockout state bypass vulnerability in the Security Account Manager Remote protocol.
Can CVE-2014-0317 be exploited remotely?
Yes, CVE-2014-0317 can potentially be exploited remotely if an attacker is able to communicate with the affected system.