MS09-007: Vulnerability in SChannel Could Allow Spoofing (960225)

High Nessus Plugin ID 35823


It may be possible to spoof user identities.


The Secure Channel (SChannel) authentication component included in the remote version of Windows does not sufficiently validate certain Transport Layer Security (TLS) handshake messages to ensure that a client does in fact have access to the private key linked to a certificate used for authentication. An attacker who has access to the public key component of a user's certificate may be able to leverage this issue to authenticate as that user against services such as web servers that use certificate-based authentication or to impersonate that user.


Microsoft has released a set of patches for Windows 2000, XP, 2003, Vista and 2008.

See Also

Plugin Details

Severity: High

ID: 35823

File Name: smb_nt_ms09-007.nasl

Version: $Revision: 1.27 $

Type: local

Agent: windows

Published: 2009/03/11

Modified: 2017/08/09

Dependencies: 57033, 13855

Risk Information

Risk Factor: High


Base Score: 9.3

Temporal Score: 6.9

Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C

Temporal Vector: CVSS2#E:U/RL:OF/RC:C

Vulnerability Information

CPE: cpe:/o:microsoft:windows

Required KB Items: SMB/MS_Bulletin_Checks/Possible

Exploit Available: false

Exploit Ease: No known exploits are available

Patch Publication Date: 2009/03/10

Vulnerability Publication Date: 2009/03/10

Reference Information

CVE: CVE-2009-0085

BID: 34015

OSVDB: 52521

MSFT: MS09-007

MSKB: 960225

CWE: 287