PT-2009-2785 · Microsoft · Windows Server 2003+6

Published 2009-03-10 · Updated 2023-12-07 · CVE-2009-0085

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:M/Au:N/C:N/I:C/A:N

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008

Description A spoofing issue exists in the Secure Channel (SChannel) authentication component when certificate authentication is used. This allows remote attackers to spoof authentication by crafting a Transport Layer Security (TLS) packet based on knowledge of the certificate but not the private key. An attacker who successfully exploits this issue can authenticate to a server using only an authorized user's digital certificate and without the associated private key.

Recommendations For Microsoft Windows 2000 SP4, update the SChannel authentication component to prevent spoofing. For Microsoft Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008, apply the necessary patch to fix the SChannel Spoofing Vulnerability. As a temporary workaround, consider restricting access to the SChannel authentication component until a patch is available.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2009-0085

Affected Products

Windows 2000

Windows Server 2003

Windows Server 2008

Windows Vista

Windows Xp

Schannel

Windows

References · 10

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-007 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0085 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2009-0085 · Security Note
• http://secunia.com/advisories/34215 · Note
• https://docs.microsoft.com/security-updates/securitybulletins/2009/MS09-007 · Note
• http://vupen.com/english/advisories/2009/0660 · Note
• http://us-cert.gov/cas/techalerts/TA09-069A.html · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6011 · Note
• http://securitytracker.com/id?1021828 · Note
• http://osvdb.org/52521 · Note