MS13-040: Vulnerabilities in .NET Framework Could Allow Spoofing (2836440)

high Nessus Plugin ID 66415

Synopsis

The version of the .NET Framework installed on the remote host is affected by multiple vulnerabilities.

Description

The remote Windows host is running a version of the Microsoft .NET Framework that is affected by multiple vulnerabilities :

- A spoofing vulnerability exists that could allow an attacker to modify the contents of an XML file without invalidating the signature associated with the file.
(CVE-2013-1336)

- An authentication bypass vulnerability exists because of the way the Microsoft .NET framework improperly creates policy requirements for authentication when setting up WCF endpoint authentication. A remote attacker who exploited this vulnerability may be able to steal information or take actions in the context of an authenticated user. (CVE-2013-1337)

Solution

Microsoft has released a set of patches for .NET Framework 2.0 SP2, 3.5.1, 4.0, and 4.5.

See Also

https://docs.microsoft.com/en-us/security-updates/SecurityBulletins/2013/ms13-040

Plugin Details

Severity: High

ID: 66415

File Name: smb_nt_ms13-040.nasl

Version: 1.12

Type: local

Agent: windows

Published: 5/15/2013

Updated: 11/27/2019

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 5.9

CVSS v2

Risk Factor: High

Base Score: 7.5

Temporal Score: 5.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS Score Source: CVE-2013-1337

Vulnerability Information

CPE: cpe:/o:microsoft:windows, cpe:/a:microsoft:.net_framework

Required KB Items: SMB/MS_Bulletin_Checks/Possible

Exploit Ease: No known exploits are available

Patch Publication Date: 5/14/2013

Vulnerability Publication Date: 5/14/2013

Reference Information

CVE: CVE-2013-1336, CVE-2013-1337

BID: 59789, 59790