NVD

Id
47431  
Name
CVE-2009-0089  
Description
Windows HTTP Services (aka WinHTTP) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, and Vista Gold allows remote web servers to impersonate arbitrary https web sites by using DNS spoofing to "forward a connection" to a different https web site that has a valid certificate matching its own domain name, but not a certificate matching the domain name of the host requested by the user, aka "Windows HTTP Services Certificate Name Mismatch Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
5.8  
Severity
Medium  
CVSS Base Score
5.8  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:P)  
Pub Date
2017-01-07  
Published
2009-04-15  
Modified Date
2010-08-21  
Seq
2009-0089  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
237355 47431 CVE-2009-0089 oval:org.mitre.oval:def:6027  View
237356 47431 CVE-2009-0089 MS09-013  View
237357 47431 CVE-2009-0089 34437  View
237358 47431 CVE-2009-0089 1022041  View
237359 47431 CVE-2009-0089 TA09-104A  View
237360 47431 CVE-2009-0089 ADV-2009-1027  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40201 JVNDB-2009-001207 Microsoft Windows の Windows HTTP サービスにおける証明書の検証処理に関する別の https web サイトになりすまし可能な脆弱性 Microsoft Windows の Windows HTTP サービスには、証明書の検証処理に不備があるため、DNS spoofing 攻撃と組み合わせることにより別の https web サイトになりすまし可能な脆弱性が存在します。 CVE-2009-0089 37520 CVE-2009-0089 47431 5.8 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001207.html 2009-04-14 2009-05-12 View