MS KB2982792: Improperly Issued Digital Certificates Could Allow Spoofing
Medium Nessus Plugin ID 76464
SynopsisThis plugin has been deprecated.
DescriptionThe remote host is missing KB2982792, KB2677070 (automatic updater), or the latest disallowed certificate update using KB2813430 (manual updater). If KB2677070 is installed, it is missing the latest auto-updates.
Note that this plugin checks that the updaters have actually updated the disallowed CTL list, not that the KBs listed are installed. This approach was taken since the KB2677070 automatic updater isn't triggered unless software that relies on SSL in the Microsoft Cryptography API is being actively used on the remote host.
SolutionIf using Windows Server 2003, run the Rvkroots.exe updater listed on KB2982792; otherwise, ensure that the Microsoft automatic updater for revoked certificates (KB2677070) is installed and running.
Alternatively, install and use KB2813430 to update the certificates offline.