MS KB2862973: Update for Deprecation of MD5 Hashing Algorithm for Microsoft Root Certificate Program
Medium Nessus Plugin ID 69334
SynopsisThe remote host is missing an update that improves cryptography and digital certificate handling in Windows.
DescriptionThe remote host is missing Microsoft KB2862973, an update that restricts the use of certificates with MD5 hashes. This restriction is limited to certificates issued under roots in the Microsoft root certificate program. This update increases the difficulty of some spoofing, phishing, and man-in-the-middle attacks.
Note that KB2862966 must also be installed in order for these changes to have any effect.
SolutionMicrosoft has released a set of patches for Windows Vista, 2008, 7, 2008 R2, 8 and 2012.