Oval Definition:	oval:org.mitre.oval:def:28270
Revision Date: 2014-12-29 Version: 45 Title: Remote Desktop Protocol (RDP) failure to audit vulnerability - CVE-2014-6318 (MS14-074) Description: The audit logon feature in Remote Desktop Protocol (RDP) in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not properly log unauthorized login attempts supplying valid credentials, which makes it easier for remote attackers to bypass intended access restrictions via a series of attempts, aka "Remote Desktop Protocol (RDP) Failure to Audit Vulnerability." Family: windows Class: vulnerability Status: ACCEPTED Reference(s): CVE-2014-6318 Platform(s): Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2 Microsoft Windows Vista Product(s): Definition Synopsis Vista/2k8 and vulnerable version of file Vista/2k8 Microsoft Windows Vista (32-bit) is installed OR Microsoft Windows Vista x64 Edition is installed OR Microsoft Windows Server 2008 (32-bit) is installed OR Microsoft Windows Server 2008 (64-bit) is installed OR Microsoft Windows Server 2008 (ia-64) is installed AND Check for vulnerable version Check if the version of lsasrv.dll is less than 6.0.6002.19214 OR Check for LDR Check if the version of lsasrv.dll is greater than or equal to 6.0.6002.23000 AND Check if the version of lsasrv.dll is less than 6.0.6002.23521 OR Win 7 / 2k8 R2 and vulnerable file version Win 7/ 2k8 R2 Microsoft Windows 7 (32-bit) is installed OR Microsoft Windows 7 x64 Edition is installed OR Microsoft Windows Server 2008 R2 x64 Edition is installed OR Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed AND Check for vulnerable versions Check if the version of lsasrv.dll is less than 6.1.7601.18637 OR Check for LDR Check if the version of lsasrv.dll is greater than or equal to 6.1.7601.22000 AND Check if the version of lsasrv.dll is less than 6.1.7601.22843 OR Win 8 / Server 2012 and vulnerable file version Win 8 / 2k12 Microsoft Windows 8 (x86) is installed OR Microsoft Windows 8 (x64) is installed OR Microsoft Windows Server 2012 (64-bit) is installed AND Check for vulnerable version Check if the version of lsasrv.dll is less than 6.2.9200.17150 OR Check for LDR Check if the version of lsasrv.dll is greater than or equal to 6.2.9200.21000 AND Check if the version of lsasrv.dll is less than 6.2.9200.21269 OR 8.1/2k12 R2 and vulnerable file version 8.1/2k12 R2 Microsoft Windows 8.1 (x86) is installed OR Microsoft Windows 8.1 (x64) is installed OR Microsoft Windows Server 2012 R2 is installed AND Check if the version of lsasrv.dll is less than 6.3.9600.17396
BACK