MS02-050: Certificate Validation Flaw Could Enable Identity Spoofing (328145)
High Nessus Plugin ID 11145
SynopsisIt is possible to spoof user identities.
DescriptionThe remote host contains a version of the CryptoAPI that could allow an attacker to spoof the identity of another user with malformed SSL certificates.
SolutionMicrosoft has released a set of patches for Windows NT, 2000 and XP.