Description
Unknown vulnerability in the PKINIT Protocol for Microsoft Windows 2000, Windows XP, and Windows Server 2003 could allow a local user to obtain information and spoof a server via a man-in-the-middle (MITM) attack between a client and a domain controller when PKINIT smart card authentication is being used.
References
- oval:org.mitre.oval:def:100104 vdb-entry signature
- 16368 third-party-advisory
- oval:org.mitre.oval:def:100102 vdb-entry signature
- 14520 vdb-entry
- oval:org.mitre.oval:def:100098 vdb-entry signature
- oval:org.mitre.oval:def:100100 vdb-entry signature
- oval:org.mitre.oval:def:100096 vdb-entry signature
- MS05-042 vendor-advisory
- VU#477341 third-party-advisory
- 1014642 vdb-entry
- oval:org.mitre.oval:def:100106 vdb-entry signature