CVE-2009-0085 - The Secure Channel (aka SChannel) authentication component in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008, when certificate authentication is used, does not properly validate the client's key exchange data in Transport Layer Security (TLS) handshake messages, which allows remote attackers to spoof authentication by crafting a TLS packet based on knowledge of the certificate but not the private key, aka "SChannel Spoofing Vulnerability."

Back Back to CVE browser

HIGH

The Secure Channel (aka SChannel) authentication component in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008, when certificate authentication is used, does not properly validate the client's key exchange data in Transport Layer Security (TLS) handshake messages, which allows remote attackers to spoof authentication by crafting a TLS packet based on knowledge of the certificate but not the private key, aka "SChannel Spoofing Vulnerability."

Published Mar 10, 2009

7.1

HIGH

CVSS 2.0

EPSS 15.19%

Description

The Secure Channel (aka SChannel) authentication component in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008, when certificate authentication is used, does not properly validate the client's key exchange data in Transport Layer Security (TLS) handshake messages, which allows remote attackers to spoof authentication by crafting a TLS packet based on knowledge of the certificate but not the private key, aka "SChannel Spoofing Vulnerability."

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-287

Improper Authentication

References (8)

http://osvdb.org/52521
vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/34215
third-party-advisoryx_refsource_SECUNIA
http://www.securitytracker.com/id?1021828
vdb-entryx_refsource_SECTRACK
http://www.us-cert.gov/cas/techalerts/TA09-069A.html
third-party-advisoryx_refsource_CERTUS Government Resource
http://www.vupen.com/english/advisories/2009/0660
vdb-entryx_refsource_VUPEN
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-007
vendor-advisoryx_refsource_MS
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-0094
Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6011
vdb-entrysignaturex_refsource_OVAL

Link	Providers	Tags
http://osvdb.org/52521		vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/34215		third-party-advisoryx_refsource_SECUNIA
http://www.securitytracker.com/id?1021828		vdb-entryx_refsource_SECTRACK
http://www.us-cert.gov/cas/techalerts/TA09-069A.html		third-party-advisoryx_refsource_CERTUS Government Resource
http://www.vupen.com/english/advisories/2009/0660		vdb-entryx_refsource_VUPEN
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-007		vendor-advisoryx_refsource_MS
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-0094		Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6011		vdb-entrysignaturex_refsource_OVAL

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner microsoft

Published Mar 10, 2009

Updated Aug 7, 2024

Reserved Jan 8, 2009

Link CVE-2009-0085

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2009-0085

Red Hat

No data

ENISA EUVD

Assigner microsoft

Published Mar 10, 2009

Updated Aug 7, 2024

Link EUVD-2009-0094

GitHub

No data

Description

Affected products

Remediation

References (8)

Change history (0)