[Forgot Password]
Login  Register Subscribe

30389

 
 

423868

 
 

244625

 
 

909

 
 

193379

 
 

277

Paid content will be excluded from the download.


Download | Alert*
OVAL

Vulnerability in Microsoft Schannel could allow security feature bypass - MS15-031

ID: oval:org.secpod.oval:def:23766Date: (C)2015-03-11   (M)2021-09-30
Class: PATCHFamily: windows




The host is missing an important security update according to Microsoft bulletin, MS15-031. The update is required to fix a security feature bypass vulnerability. A flaw is present in the application, that is caused by an issue in the TLS state machine whereby a client system accepts an RSA key with a shorter key length than the originally negotiated key length. Successful exploitation could attackers to perform MiTM attacks that could decrypt encrypted traffic.

Platform:
Microsoft Windows Server 2003
Microsoft Windows Vista
Microsoft Windows Server 2008
Microsoft Windows 7
Microsoft Windows Server 2008 R2
Microsoft Windows 8
Microsoft Windows 8.1
Microsoft Windows Server 2012
Microsoft Windows Server 2012 R2
Reference:
MS15-031
CVE-2015-1637
CVE    1
CVE-2015-1637
CPE    29
cpe:/o:microsoft:windows_server_2008:r2:sp1:x64
cpe:/o:microsoft:windows_7::sp1:x64
cpe:/o:microsoft:windows_7::sp1:x86
cpe:/o:microsoft:windows_server_2008:r2:sp1:itanium
...

© SecPod Technologies