ms11-013

MS11-013 is a Microsoft security bulletin addressing vulnerabilities in the Kerberos authentication protocol that could allow elevation of privilege on affected Windows systems. The update resolves one privately reported and one publicly disclosed vulnerability, with the most severe potentially enabling a local, authenticated attacker to gain elevated privileges by installing a malicious service on a domain-joined computer. This bulletin applies to Windows XP, Windows Server 2003, Windows 7, and Windows Server 2008 R2. It was released as part of the February 2011 security bulletin summary and is rated Important. Discussions on WindowsForum.com cover the bulletin details, affected systems, and the exploitability assessment for the associated CVE-2011-0091.