CVE-2015-0005 is a spoofing vulnerability in the NETLOGON service affecting Microsoft Windows Server 2003, 2008, and 2012 when configured as a Domain Controller. This flaw allows remote attackers to spoof a secure channel's computer name and obtain sensitive session information by sniffing network traffic. With a CVSS score of 4.3, it has a low severity, requiring adjacent network access and medium attack complexity to achieve partial confidentiality and integrity impact. There is no evidence of active exploitation, public exploit code, or significant community discussion, with only one article mentioning it in 2015.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
All Versions ImpactedCPE matchmatch criteria | cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:* | ||
All Versions ImpactedCPE matchmatch criteria | cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:* | ||
r2CPE matchmatch criteria | cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:* | ||
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:* | ||
r2CPE matchmatch criteria | cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:datacenter:*:*:* |
CVSS version used by this source: 2.0
AV:A/AC:M/Au:N/C:P/I:P/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.0 GitHub mentions.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.