CVE-2013-3876 in Windows

सारांश

द्वारा VulDB • 11/07/2026

Microsoft Windows XP SP2 aur SP3, Windows Server 2003 SP2, Windows Vista SP1 aur SP2, Windows Server 2008 SP2 aur R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold aur R2, aur Windows RT Gold aur 8.1 mein DirectAccess server X.509 certificates ko sahi se verify nahi karta hai, jisse man-in-the-middle attackers servers ka spoofing kar sakte hain aur crafted certificate ke zariye encrypted domain credentials padh sakte hain.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• आरक्षित करना: 03/06/2013
• प्रकटीकरण: 17/11/2013
• संयम: स्वीकृत
• प्रविष्टि: VDB-11167
• CPE: तैयार
• CWE: CWE-20 (पुष्टि की गई)
• CVSS: 7.1 (NVD)
• EPSS: 0.05218
• KEV: नहीं
• गतिविधियाँ: बहुत कम
• क्षेत्र: Police, Education, ...

स्रोत

• MITRE: https://www.cve.org/CVERecord?id=CVE-2013-3876
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2013-3876
• CVE Details: https://www.cvedetails.com/cve/CVE-2013-3876/