MS KB2718704: Unauthorized Digital Certificates Could Allow Spoofing (deprecated)

Medium Nessus Plugin ID 59357


This plugin has been deprecated.


The remote host is missing KB2718704, which updates the system's SSL certificate blacklist.

Certificates issued by the Microsoft Terminal Services licensing certification authority can be used to sign code as Microsoft. An attacker could exploit this to spoof content or perform man-in-the-middle attacks. KB2718704 revokes the trust of the three intermediate CA certificates that can be used to perform this attack.


Install Microsoft KB2718704.

See Also

Plugin Details

Severity: Medium

ID: 59357

File Name: smb_kb2718704.nasl

Version: $Revision: 1.8 $

Type: local

Agent: windows

Family: Windows

Published: 2012/06/04

Modified: 2017/08/30

Dependencies: 13855

Risk Information

Risk Factor: Medium


Base Score: 5.8

Temporal Score: 4.8

Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:N

Temporal Vector: CVSS2#E:F/RL:OF/RC:C

Vulnerability Information

CPE: cpe:/o:microsoft:windows

Required KB Items: SMB/Registry/Enumerated, SMB/WindowsVersion, SMB/ProductName

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 2012/06/03

Vulnerability Publication Date: 2012/06/03

Reference Information

BID: 53760

OSVDB: 82693

MSKB: 2718704