Oval Definition:	oval:org.mitre.oval:def:16273
Revision Date: 2013-05-06 Version: 46 Title: Microsoft SSL Version 3 and TLS Protocol Security Feature Bypass Vulnerability - MS13-006 Description: The SSL provider component in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT does not properly handle encrypted packets, which allows man-in-the-middle attackers to conduct SSLv2 downgrade attacks against (1) SSLv3 sessions or (2) TLS sessions by intercepting handshakes and injecting content, aka "Microsoft SSL Version 3 and TLS Protocol Security Feature Bypass Vulnerability." Family: windows Class: vulnerability Status: ACCEPTED Reference(s): CVE-2013-0013 Platform(s): Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012 Microsoft Windows Vista Product(s): Definition Synopsis vista sp2/server 2008 sp2/version GDR/LDR Check if the version of Ncrypt.dll is less than 6.0.6002.18736 OR LDR range Check if the version of Ncrypt.dll is gretaer than or equal to 6.0.6002.22000 AND Check if the version of Ncrypt.dll is less than 6.0.6002.22981 AND vista/server 2008 Microsoft Windows Vista (32-bit) Service Pack 2 is installed OR Microsoft Windows Vista x64 Edition Service Pack 2 is installed OR Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed OR Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed OR Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed OR win 7/server 2008 R2/version win 7/server 2008 R2 Microsoft Windows 7 is installed OR Microsoft Windows Server 2008 R2 is installed AND GDR/LDR Check if the version of Ncrypt.dll is less than 6.1.7600.17172 OR LDR range Check if the version of Ncrypt.dll is greater than or equal to 6.1.7600.20000 AND Check if the version of Ncrypt.dll is less than 6.1.7600.21377 OR win 7 sp1/server 2008 R2 sp1/version win 7 sp1/server 2008 R2 sp1 Microsoft Windows Server 2008 R2 x64 Service Pack 1 is installed OR Microsoft Windows Server 2008 R2 Itanium-Based Edition Service Pack 1 is installed OR Microsoft Windows 7 (32-bit) Service Pack 1 is installed OR Microsoft Windows 7 x64 Service Pack 1 is installed AND GRD/LRD Check if the version of Ncrypt.dll is less than 6.1.7601.18007 OR LDR range Check if the version of Ncrypt.dll is greater than or equal to 6.1.7601.21000 AND Check if the version of Ncrypt.dll is less than 6.1.7601.22169 OR win 8/server 2012/version win 8/server 2012 Microsoft Windows 8 is installed OR Microsoft Windows Server 2012 is installed AND GDR/LDR Check if the version of Ncryptsslp.dll is less than 6.2.9200.16464 OR LDR range Check if the version of Ncryptsslp.dll greater than or equal to 6.2.9200.20000 AND Check if the version of Ncryptsslp.dll is less than 6.2.9200.20568
BACK