Microsoft Windows RPC相互认证服务欺骗漏洞(MS06-031)

2006-10-27T00:00:00
ID SSV:252
Type seebug
Reporter Root
Modified 2006-10-27T00:00:00

Description

Microsoft Windows是微软发布的非常流行的操作系统。

Microsoft Windows在通过SSL进行相互认证时没有正确的验证RPC服务器,允许攻击者欺骗RPC服务器,诱骗用户连接到看起来好像有效的恶意RPC服务器。

Microsoft Windows 2000SP4 MS06-031:Vulnerability in RPC Mutual Authentication Could Allow Spoofing (917736) 链接:http://www.microsoft.com/technet/security/Bulletin/MS06-031.mspx

补丁下载: http://www.microsoft.com/downloads/details.aspx?FamilyId=5089d956-7d8d-4241-9ca2-107ce4f8c093