CERTA-2009-AVI-092
Vulnerability from certfr_avis

Une vulnérabilité dans le composant d'authentification SChannel de Microsoft Windows permet à un utilisateur malveillant d'usurper une identité afin de se connecter à un serveur.

Description

Une vulnérabilié dans le composant d'authentification SChannel peut être exploitée par un utilisateur malintentionné, ayant obtenu au préalable un certificat d'authentification, afin de se connecter à un serveur distant sans pour autant être en possession de la clé privée associée.

Solution

Se référer au bulletin de sécurité MS09-007 de Microsoft pour l'obtention des correctifs (cf. section Documentation).

None
Impacted products
Vendor Product Description
Microsoft Windows Microsoft Windows Server 2008 32-bit, x64 et à base d'Itanium.
Microsoft Windows Microsoft Windows Server 2003 Service Pack 1 et 2, y compris les systèmes à base d'Itanium ;
Microsoft Windows Microsoft Windows Vista x64 Edition et Service Pack 1 ;
Microsoft Windows Microsoft Windows Vista et Service Pack 1 ;
Microsoft Windows Microsoft Windows XP Service Pack 2 et 3 ;
Microsoft Windows Microsoft Windows XP professional x64 Edition et x64 Edition Service Pack 2 ;
Microsoft Windows Microsoft Windows 2000 Service Pack 4 ;
References

Show details on source website

To clipboard 

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Microsoft Windows Server 2008 32-bit, x64 et \u00e0 base d\u0027Itanium.",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Windows Server 2003 Service Pack 1 et 2, y compris les syst\u00e8mes \u00e0 base d\u0027Itanium ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Windows Vista x64 Edition et Service Pack 1 ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Windows Vista et Service Pack 1 ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Windows XP Service Pack 2 et 3 ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Windows XP professional x64 Edition et x64 Edition Service Pack 2 ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Windows 2000 Service Pack 4 ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nUne vuln\u00e9rabili\u00e9 dans le composant d\u0027authentification SChannel peut \u00eatre\nexploit\u00e9e par un utilisateur malintentionn\u00e9, ayant obtenu au pr\u00e9alable\nun certificat d\u0027authentification, afin de se connecter \u00e0 un serveur\ndistant sans pour autant \u00eatre en possession de la cl\u00e9 priv\u00e9e associ\u00e9e.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 MS09-007 de Microsoft pour\nl\u0027obtention des correctifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2009-0085",
      "url": "https://www.cve.org/CVERecord?id=CVE-2009-0085"
    }
  ],
  "initial_release_date": "2009-03-10T00:00:00",
  "last_revision_date": "2009-03-10T00:00:00",
  "links": [],
  "reference": "CERTA-2009-AVI-092",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2009-03-10T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 dans le composant d\u0027authentification SChannel de\nMicrosoft Windows permet \u00e0 un utilisateur malveillant d\u0027usurper une\nidentit\u00e9 afin de se connecter \u00e0 un serveur.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans le composant d\u0027authentification Secure Channel de Microsoft Windows",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft MS09-007 du 10 mars 2009",
      "url": "http://www.microsoft.com/technet/security/Bulletin/MS09-007.mspx"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.