Detections
Analytics

MS KB2862973: Update for Deprecation of MD5 Hashing Algorithm for Microsoft Root Certificate Program

medium Nessus Plugin ID 69334

Language:

Synopsis

The remote host is missing an update that improves cryptography and digital certificate handling in Windows.

Description

The remote host is missing Microsoft KB2862973, an update that restricts the use of certificates with MD5 hashes. This restriction is limited to certificates issued under roots in the Microsoft root certificate program. This update increases the difficulty of some spoofing, phishing, and man-in-the-middle attacks.

Note that KB2862966 must also be installed in order for these changes to have any effect.

Solution

Microsoft has released a set of patches for Windows Vista, 2008, 7, 2008 R2, 8 and 2012.

See Also

https://docs.microsoft.com/en-us/security-updates/SecurityAdvisories/2014/2862973

https://support.microsoft.com/en-us/help/2862966/an-update-is-available-that-improves-management-of-weak-certificate-cr

Plugin Details

Severity: Medium

ID: 69334

File Name: smb_kb2862973.nasl

Version: 1.3

Type: local

Agent: windows

Family: Windows

Published: 8/14/2013

Updated: 11/15/2018

Supported Sensors: Nessus Agent, Nessus

Vulnerability Information

CPE: cpe:/o:microsoft:windows

Required KB Items: SMB/Registry/Enumerated, SMB/WindowsVersion

Patch Publication Date: 8/13/2013

Reference Information

MSKB: 2862973