MS KB3097966: Inadvertently Disclosed Digital Certificates Could Allow Spoofing

Medium Nessus Plugin ID 86149


The remote Windows host has an out-of-date SSL certificate blacklist.


The remote host is missing KB3097966, KB2677070 (automatic updater), or the latest disallowed certificate update using KB2813430 (manual updater). If KB2677070 has been installed, it has not yet obtained the latest auto-updates.

Note that this plugin checks that the updaters have actually updated the disallowed CTL list, not that the KBs listed are installed. This approach was taken since the KB2677070 automatic updater isn't triggered unless software that relies on SSL in the Microsoft Cryptography API is being actively used on the remote host.


Ensure that the KB3097966 security update has been installed and that the Microsoft automatic updater for revoked certificates is installed and running.

See Also

Plugin Details

Severity: Medium

ID: 86149

File Name: smb_kb3097966.nasl

Version: $Revision: 1.8 $

Type: local

Agent: windows

Family: Windows

Published: 2015/09/25

Modified: 2017/08/30

Dependencies: 62042, 13855

Risk Information

Risk Factor: Medium


Base Score: 5.8

Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:N


Base Score: 6.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Vulnerability Information

CPE: cpe:/o:microsoft:windows

Required KB Items: SMB/Registry/Enumerated, SMB/WindowsVersion, SMB/ProductName

Patch Publication Date: 2015/09/24

Vulnerability Publication Date: 2015/09/24

Reference Information

MSKB: 3097966