Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
DirectAccess in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not properly verify server X.509 certificates, which allows man-in-the-middle attackers to spoof servers and read encrypted domain credentials via a crafted certificate.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Microsoft Windows DirectAccess 安全漏洞
Vulnerability Description
Windows是美国微软（Microsoft）公司发布的一系列操作系统。 Windows的DirectAccess（直接访问）对直接访问服务器到客户端的连接进行身份验证的方式中存在漏洞。成功利用此漏洞的攻击者可能使用特制的直接访问服务器伪装成合法直接访问服务器，以便与合法直接访问客户端建立连接。由攻击者控制的系统看起来好像是一个合法的服务器，可能导致客户端系统自动进行身份验证并与由攻击者控制的系统进行连接，从而允许攻击者截取目标用户的网络流量并潜在确定其加密的域凭据。以下为受影响系统：Microsoft
CVSS Information
N/A
Vulnerability Type
N/A