MS KB3123040: Improperly Issued Digital Certificates Could Allow Spoofing

This script is Copyright (C) 2015-2017 Tenable Network Security, Inc.


Synopsis :

The remote Windows host has an out-of-date SSL certificate blacklist.

Description :

The remote host is missing KB3046310, KB2677070 (automatic updater),
or the latest disallowed certificate update using KB2813430 (manual
updater). If KB2677070 has been installed, it has not yet obtained the
latest auto-updates.

Note that this plugin checks that the updaters have actually updated
the disallowed CTL list, not that the KBs listed are installed. This
approach was taken since the KB2677070 automatic updater isn't
triggered unless software that relies on SSL in the Microsoft
Cryptography API is being actively used on the remote host.

See also :

https://technet.microsoft.com/en-us/library/security/3123040
http://www.nessus.org/u?472117a2
http://www.nessus.org/u?ae862e27
http://www.nessus.org/u?a944e0bb

Solution :

Ensure that the Microsoft automatic updater for revoked certificates
(KB2677070) is installed and running.

Risk factor :

Medium / CVSS Base Score : 5.8
(CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:N)

Family: Windows

Nessus Plugin ID: 87252 ()

Bugtraq ID:

CVE ID:

Ready to Amp Up Your Nessus Experience?

Get Nessus Professional to scan unlimited IPs, run compliance checks & more

Buy Nessus Professional Now