Test Kennung:	1.3.6.1.4.1.25623.1.0.805036
Kategorie:	Windows : Microsoft Bulletins
Titel:	Microsoft Windows Network Location Awareness Service Security Bypass Vulnerability (3022777)
Zusammenfassung:	This host is missing an important security; update according to Microsoft Bulletin MS15-005.
Beschreibung:	Summary: This host is missing an important security update according to Microsoft Bulletin MS15-005. Vulnerability Insight: The flaw is due to an error within the Network Location Awareness (NLA) service when validating if a domain-connected computer is connected to the domain. Vulnerability Impact: Successful exploitation will allow remote attackers to relax the firewall policy and/or configuration of certain services by spoofing responses of DNS or LDAP traffic via a Man-in-the-Middle attack. Affected Software/OS: - Microsoft Windows 8 x32/x64 - Microsoft Windows Server 2012/R2 - Microsoft Windows 8.1 x32/x64 - Microsoft Windows 7 x32/x64 Service Pack 1 and prior - Microsoft Windows 2003 x32/x64 Service Pack 2 and prior - Microsoft Windows Vista x32/x64 Service Pack 2 and prior - Microsoft Windows Server 2008 R2 x64 Service Pack 1 and prior - Microsoft Windows Server 2008 x32/x64 Service Pack 2 and prior Solution: The vendor has released updates. Please see the references for more information. CVSS Score: 6.1 CVSS Vector: AV:A/AC:L/Au:N/C:N/I:C/A:N
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2015-0006 BugTraq ID: 71930 http://www.securityfocus.com/bid/71930 Microsoft Security Bulletin: MS15-005 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-005 http://secunia.com/advisories/62098 http://secunia.com/advisories/62184 XForce ISS Database: ms-nla-cve20150006-security-bypass(99521) https://exchange.xforce.ibmcloud.com/vulnerabilities/99521 XForce ISS Database: win-ms15kb3022777-update(99522) https://exchange.xforce.ibmcloud.com/vulnerabilities/99522
Copyright	Copyright (C) 2015 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.