CVE-2002-0862 The (1) CertGetCertificateChain, (2) CertVerifyCertificateChainPolicy, and (3) WinVerifyTrust APIs within the CryptoAPI for Microsoft products including Microsoft Windows 98 through XP, Office for Mac...
MediumCVSS 6.8
EPSS 15.8%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The (1) CertGetCertificateChain, (2) CertVerifyCertificateChainPolicy, and (3) WinVerifyTrust APIs within the CryptoAPI for Microsoft products including Microsoft Windows 98 through XP, Office for Mac, Internet Explorer for Mac, and Outlook Express for Mac, do not properly verify the Basic Constraints of intermediate CA-signed X.509 certificates, which allows remote attackers to spoof the certificates of trusted sites via a man-in-the-middle attack for SSL sessions, as originally reported for Internet Explorer and IIS.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft windows 2000 | All versions | No fix listed |
| Microsoft windows 98 | All versions | No fix listed |
| Microsoft windows 98se | All versions | No fix listed |
| Microsoft windows me | All versions | No fix listed |
| Microsoft windows nt | = 4.0 | No fix listed |
| Microsoft windows xp | All versions | No fix listed |
| Microsoft internet explorer | All versions | No fix listed |
| Microsoft office | All versions | No fix listed |
| Microsoft outlook express | All versions | No fix listed |
References
- 20020805 IE SSL Vulnerability mailing-list
- 20020812 IE SSL Exploit mailing-list
- 20020819 Insufficient Verification of Client Certificates in IIS 5.0 pre sp3 mailing-list
- MS02-050 patch vendor-advisory
- ssl-ca-certificate-spoofing(9776) third-party-advisory vdb-entry
- oval:org.mitre.oval:def:1056 broken-link signature vdb-entry
- oval:org.mitre.oval:def:1332 broken-link signature vdb-entry
- oval:org.mitre.oval:def:2671 broken-link signature vdb-entry