Detections
Analytics

Improperly Issued Digital Certificates Could Allow Spoofing (Microsoft Security Advisory 2916652)

medium Nessus Plugin ID 71265

Language:

Synopsis

This plugin has been deprecated.

Description

The remote host is missing either KB2677070 or KB2917500. If KB2677070 is installed, it is missing the latest auto-updates.

Note that this plugin checks that the updaters have actually updated the disallowed CTL list, not that the KBs listed are installed. This approach was taken since the KB2677070 automatic updater isn't triggered unless software that relies on SSL in the Microsoft Cryptography API is being actively used on the remote host.

Solution

Ensure that the Microsoft automatic updater for revoked certificates (KB2677070) is installed and running. Install KB2917500 if running Windows XP or Windows Server 2003.

See Also

http://technet.microsoft.com/en-us/security/advisory/2916652

Plugin Details

Severity: Medium

ID: 71265

File Name: smb_kb2916652.nasl

Version: 1.12

Type: local

Agent: windows

Family: Windows

Published: 12/10/2013

Updated: 2/28/2022

Supported Sensors: Nessus Agent, Nessus

Vulnerability Information

CPE: cpe:/o:microsoft:windows

Required KB Items: SMB/Registry/Enumerated, SMB/WindowsVersion, SMB/ProductName

Patch Publication Date: 12/9/2013

Vulnerability Publication Date: 12/9/2013