MS KB2862973: Update for Deprecation of MD5 Hashing Algorithm for Microsoft Root Certificate Program

Medium Nessus Plugin ID 69334


The remote host is missing an update that improves cryptography and digital certificate handling in Windows.


The remote host is missing Microsoft KB2862973, an update that restricts the use of certificates with MD5 hashes. This restriction is limited to certificates issued under roots in the Microsoft root certificate program. This update increases the difficulty of some spoofing, phishing, and man-in-the-middle attacks.

Note that KB2862966 must also be installed in order for these changes to have any effect.


Microsoft has released a set of patches for Windows Vista, 2008, 7, 2008 R2, 8 and 2012.

See Also

Plugin Details

Severity: Medium

ID: 69334

File Name: smb_kb2862973.nasl

Version: $Revision: 1.2 $

Type: local

Agent: windows

Family: Windows

Published: 2013/08/14

Modified: 2017/08/30

Dependencies: 13855

Risk Information

Risk Factor: Medium


Base Score: 4

Vector: CVSS2#AV:N/AC:H/Au:N/C:P/I:P/A:N

Vulnerability Information

CPE: cpe:/o:microsoft:windows

Required KB Items: SMB/Registry/Enumerated, SMB/WindowsVersion

Patch Publication Date: 2013/08/13

Reference Information

MSKB: 2862973