MS KB3050995: Improperly Issued Digital Certificates Could Allow Spoofing (deprecated)

medium Nessus Plugin ID 82075

Language:

Synopsis

This plugin has been deprecated.

Description

The remote host is missing KB3050995, KB2677070 (automatic updater), or the latest disallowed certificate update using KB2813430 (manual updater). If KB2677070 has been installed, it has not yet obtained the latest auto-updates.

Note that this plugin checks that the updaters have actually updated the disallowed CTL list, not that the KBs listed are installed. This approach was taken since the KB2677070 automatic updater isn't triggered unless software that relies on SSL in the Microsoft Cryptography API is being actively used on the remote host.

Solution

If using Windows Server 2003, run the updater listed on KB3050995;
otherwise, ensure that the Microsoft automatic updater for revoked certificates is installed and running.

Plugin Details

Severity: Medium

ID: 82075

File Name: smb_kb3050995.nasl

Version: 1.7

Type: local

Agent: windows

Family: Windows

Published: 3/25/2015

Updated: 2/28/2022

Supported Sensors: Nessus Agent, Nessus

Vulnerability Information

CPE: cpe:/o:microsoft:windows

Required KB Items: SMB/Registry/Enumerated, SMB/WindowsVersion, SMB/ProductName

Patch Publication Date: 3/24/2015

Vulnerability Publication Date: 3/24/2015

Reference Information

MSKB: 3050995

Detections

Analytics