Family: Windows : Microsoft Bulletins --> Category: infos
Certificate Validation Flaw Could Enable Identity Spoofing (Q328145) Vulnerability Scan
Vulnerability Scan Summary
Checks for MS Hotfix Q328145, Certificate Validation Flaw
Detailed Explanation for this Vulnerability Test
It is possible to spoof user identity.
The remote host contains a version of the CryptoAPI which is vulnerable
to a security flaw which may allow a possible hacker to spoof the identity
of another user with malformed SSL certificates.
Microsoft has released a set of patches for Windows NT, 2000 and XP :
Low / CVSS Base Score : 2
Click HERE for more information and discussions on this network vulnerability scan.