Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
SChannel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 lacks the required extended master-secret binding support to ensure that a server's X.509 certificate is the same during renegotiation as it was before renegotiation, which allows man-in-the-middle attackers to obtain sensitive information or modify TLS session data via a "triple handshake attack," aka "Schannel TLS Triple Handshake Vulnerability."
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Microsoft Windows Schannel TLS三次握手漏洞
Vulnerability Description
Microsoft Windows是美国微软（Microsoft）公司发布的一系列操作系统。Microsoft Schannel（全称Secure Channel，安全通道）是其中的一个安全支持提供程序（SSP），它可实现安全套接字层（SSL）和传输层安全（TLS） Internet标准身份验证协议，并提供身份验证服务以便在客户端和服务器之间提供安全的通信。 Microsoft Windows的Schannel中存在欺骗漏洞，该漏洞源于TLS协议的支持版本中存在缺陷。攻击者可利用该漏洞实施中间人攻击，在任
CVSS Information
N/A
Vulnerability Type
N/A