Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2013-0005

The WCF Replace function in the Open Data (aka OData) protocol implementation in Microsoft .NET Framework 3.5, 3.5 SP1, 3.5.1, and 4, and the Management OData IIS Extension on Windows Server 2012, allows remote attackers to cause a denial of service (resource consumption and daemon restart) via crafted values in HTTP requests, aka "Replace Denial of Service Vulnerability."

Published

2013-01-09T18:09:40.133

Last Modified

2025-04-11T00:51:21.963

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 7.8 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: NONE
  • Availability Impact: COMPLETE
Exploitability Score

10.0

Impact Score

6.9

Weaknesses
  • Type: Primary
    CWE-20
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application microsoft .net_framework 3.5 Yes
Operating System microsoft windows_8 - No
Operating System microsoft windows_8 - No
Operating System microsoft windows_server_2012 - No
Application microsoft .net_framework 3.5 Yes
Operating System microsoft windows_server_2003 * No
Operating System microsoft windows_server_2008 * No
Operating System microsoft windows_server_2008 * No
Operating System microsoft windows_server_2008 * No
Operating System microsoft windows_vista * No
Operating System microsoft windows_vista - No
Operating System microsoft windows_xp * No
Operating System microsoft windows_xp sp2 No
Application microsoft .net_framework 3.5.1 Yes
Operating System microsoft windows_7 * No
Operating System microsoft windows_7 * No
Operating System microsoft windows_7 - No
Operating System microsoft windows_server_2008 r2 No
Operating System microsoft windows_server_2008 r2 No
Application microsoft .net_framework 4.0 Yes
Operating System microsoft windows_7 * No
Operating System microsoft windows_7 * No
Operating System microsoft windows_7 - No
Operating System microsoft windows_server_2003 * No
Operating System microsoft windows_server_2008 * No
Operating System microsoft windows_server_2008 * No
Operating System microsoft windows_server_2008 - No
Operating System microsoft windows_server_2008 r2 No
Operating System microsoft windows_server_2008 r2 No
Operating System microsoft windows_server_2008 r2 No
Operating System microsoft windows_vista * No
Operating System microsoft windows_xp - No
Operating System microsoft windows_xp sp2 No
Application microsoft management_odata_iis_extension - Yes
Operating System microsoft windows_server_2012 - No
References