ID de Prueba:	1.3.6.1.4.1.25623.1.0.11215
Categoría:	Windows : Microsoft Bulletins
Título:	Flaw in SMB Signing Could Enable Group Policy to be Modified (329170)
Resumen:	The SMB signing capability in the Server Message Block; protocol in Microsoft Windows 2000 and Windows XP allows attackers to disable the digital; signing settings in an SMB session to force the data to be sent unsigned, then inject data; into the session without detection, e.g. by modifying group policy information sent from a; domain controller.
Descripción:	Summary: The SMB signing capability in the Server Message Block protocol in Microsoft Windows 2000 and Windows XP allows attackers to disable the digital signing settings in an SMB session to force the data to be sent unsigned, then inject data into the session without detection, e.g. by modifying group policy information sent from a domain controller. Affected Software/OS: - Microsoft Windows 2000 - Microsoft Windows XP Solution: The vendor has released updates. Please see the references for more information. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2002-1256 BugTraq ID: 6367 http://www.securityfocus.com/bid/6367 Microsoft Security Bulletin: MS02-070 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-070 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A277 XForce ISS Database: win-smb-policy-modification(10843) https://exchange.xforce.ibmcloud.com/vulnerabilities/10843
Copyright	Copyright (C) 2003 SECNAP Network Security

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.