Microsoft Windows RPC相互认证服务欺骗漏洞（MS06-031）

Microsoft Windows是微软发布的非常流行的操作系统。 Microsoft Windows在通过SSL进行相互认证时没有正确的验证RPC服务器，允许攻击者欺骗RPC服务器，诱骗用户连接到看起来好像有效的恶意RPC服务器。 Microsoft Windows 2000SP4 MS06-031：Vulnerability in RPC Mutual Authentication Could Allow Spoofing 917736 链接：http://www.microsoft.com/technet/security/Bulletin/MS06-031.mspx 补丁下载：...

MS06-031: Vulnerability in RPC Mutual Authentication Could Allow Spoofing (917736)

The remote version of Windows contains a version of SMB Server Message Block protocol that is vulnerable to a spoofing attack. An attacker may exploit these flaws to enduce a user to connect to a malicious RPC server. Tenable Network Security, Inc. include"compat.inc"; if description scriptid2169...