Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Fraudulent Digital Certificates Could Allow Spoofing


03 Jan 2013   #1
Microsoft MVP

64-bit Windows 8.1 Enterprise
 
 
Fraudulent Digital Certificates Could Allow Spoofing

Quote:
Microsoft Security Advisory (2798897)

Microsoft is aware of active attacks using one fraudulent digital certificate issued by TURKTRUST Inc., which is a CA present in the Trusted Root Certification Authorities Store. This fraudulent certificate could be used to spoof content, perform phishing attacks, or perform man-in-the-middle attacks. This issue affects all supported releases of Microsoft Windows.

TURKTRUST Inc. incorrectly created two subsidiary CAs (*.EGO.GOV.TR and e-islem.kktcmerkezbankasi.org). The *.EGO.GOV.TR subsidiary CA was then used to issue a fraudulent digital certificate to *.google.com. This fraudulent certificate could be used to spoof content, perform phishing attacks, or perform man-in-the-middle attacks against several Google web properties.

To help protect customers from the fraudulent use of this digital certificate, Microsoft is updating the Certificate Trust list (CTL) and is providing an update for all supported releases of Microsoft Windows that removes the trust of certificates that are causing this issue.


Source:
Microsoft Security Advisory (2798897): Fraudulent Digital Certificates Could Allow Spoofing


See also:
http://support.microsoft.com/kb/2798897

My System SpecsSystem Spec
.

04 Jan 2013   #2
NoN

Windows 7 Professional SP1 - x64
 
 

Checked twice today and it wouldn't go on Windows Update with Windows 7. I had to download the patch.

Checked the "certmgr" untrusted section after install, no probs, they are tagged untrusted now.

As for XP SP3 it was on automatic update....so no action required by the user.
My System SpecsSystem Spec
Reply

 Fraudulent Digital Certificates Could Allow Spoofing




Thread Tools




Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 09:00 AM.
Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App
  

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33