CVE:CVE-2020-1472
CNNVD:CNNVD-202008-548
Microsoft Windows Netlogon是美国微软（Microsoft）公司的Windows的一个重要组件，主要功能是用户和机器在域内网络上的认证，以及复制数据库以进行域控备份，同时还用于维护域成员与域之间、域与域控之间、域DC与跨域DC之间的关系。
Microsoft Windows Netlogon 存在安全漏洞。攻击者可以使用 Netlogon 远程协议 (MS-NRPC) 建立与域控制器的易受攻击的 Netlogon 安全通道连接并进行特权提升。
solution:Upgrade microsoft windows_server_2008 to a higher version than r2:sp1,and avoid the version r2:sp1; Upgrade microsoft windows_server_2012 to a higher version than -,r2,and avoid the version r2; Upgrade microsoft windows_server_2016 to a higher version than -,1903,1909,2004,and avoid the version 1903,1909,2004; Upgrade microsoft windows_server_2019 to a higher version than -; Upgrade fedoraproject fedora to a higher version than 31,32,33,and avoid the version 31,32,33; Upgrade opensuse leap to a higher version than 15.1,15.2,and avoid the version 15.1,15.2; Upgrade canonical ubuntu_linux to a higher version than 14.04,16.04,18.04,20.04,and avoid the version 14.04,16.04,18.04,20.04; Upgrade synology directory_server to a higher version than 4.4.5-0101,and avoid the version (,4.4.5-0101); Upgrade samba samba to a higher version than 4.10.18,4.11.13,4.12.7,and avoid the version (,4.10.18),[4.11.0,4.11.13),[4.12.0,4.12.7); Upgrade debian debian_linux to a higher version than 9.0,and avoid the version 9.0; Upgrade oracle zfs_storage_appliance_kit to a higher version than 8.8,and avoid the version 8.8