PT-2005-2931 · Microsoft · Windows 2000+2

Aaron Jaggard + 4 · Publicado 2005-08-10 · Atualizado 2019-04-30 · CVE-2005-1982

Positive Technologies (AI Summary)

CVSS v2.0

3.6

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to the patchday that contains the fix for this issue

Description The issue allows a local user to obtain information and spoof a server via a man-in-the-middle (MITM) attack between a client and a domain controller when PKINIT smart card authentication is being used. This occurs due to an unknown vulnerability in the PKINIT Protocol.

Recommendations For Microsoft Windows 2000, Windows XP, and Windows Server 2003, apply the patch from the patchday that contains the fix for this issue to resolve the problem. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2005-1982

Produtos afetados

Windows 2000

Windows Server 2003

Windows Xp

Referências · 12

• https://nvd.nist.gov/vuln/detail/CVE-2005-1982 · Nota de Segurança
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100096 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100100 · Nota
• http://securitytracker.com/id?1014642 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-042 · Aviso do Fabricante
• http://kb.cert.org/vuls/id/477341 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100104 · Nota
• http://securityfocus.com/bid/14520 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100098 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100106 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100102 · Nota
• http://secunia.com/advisories/16368 · Aviso do Fabricante