oval:org.mitre.oval:def:5882

Definition Id: oval:org.mitre.oval:def:5882

Oval ID:	oval:org.mitre.oval:def:5882
Title:	Single Sign On Spoofing in ADFS Vulnerability
Description:	The single sign-on implementation in Active Directory Federation Services (ADFS) in Microsoft Windows Server 2003 SP2 and Server 2008 Gold and SP2 does not properly remove credentials at the end of a network session, which allows physically proximate attackers to obtain the credentials of a previous user of the same web browser by using data from the browser's cache, aka "Single Sign On Spoofing in ADFS Vulnerability."
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2009-2508	Version:	5
Platform(s):	Microsoft Windows Server 2003 Microsoft Windows Server 2008	Product(s):
Definition Synopsis:
Windows Server 2003 x86/x64 SP2 IF Microsoft Windows Server 2003 SP2 (x64) is installed AND Microsoft Windows Server 2003 SP2 (x86) is installed AND the system is being used as: Member Server, BDC or PDC (DomainRole is 3, 4 or 5) AND the version of System.web.security.singlesignon.dll is less than 5.2.3790.4578 OR Windows Server 2008 32-bit/x64/ia64 SP1 GDR IF Microsoft Windows Server 2008 (32-bit) is installed AND Microsoft Windows Server 2008 (64-bit) is installed AND the system is being used as: Member Server, BDC or PDC (DomainRole is 3, 4 or 5) AND the version of System.web.security.singlesignon.dll is less than 6.0.6001.18311 AND the version of System.web.security.singlesignon.dll is greater than 6.0.6001.18000 OR Windows Server 2008 32-bit/x64/ia64 SP1 LDR IF Microsoft Windows Server 2008 (32-bit) is installed AND Microsoft Windows Server 2008 (64-bit) is installed AND the system is being used as: Member Server, BDC or PDC (DomainRole is 3, 4 or 5) AND the version of System.web.security.singlesignon.dll is less than 6.0.6001.22498 AND the version of System.web.security.singlesignon.dll is greater than 6.0.6001.22000 OR Windows Server 2008 32-bit/x64 SP2 GDR IF Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed AND Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed AND the system is being used as: Member Server, BDC or PDC (DomainRole is 3, 4 or 5) AND the version of System.web.security.singlesignon.dll is less than 6.0.6002.18091 AND the version of System.web.security.singlesignon.dll is greater than 6.0.6002.18000 OR Windows Server 2008 32-bit/x64 SP2 LDR IF Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed AND Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed AND the system is being used as: Member Server, BDC or PDC (DomainRole is 3, 4 or 5) AND the version of System.web.security.singlesignon.dll is less than 6.0.6002.22201 AND the version of System.web.security.singlesignon.dll is greater than 6.0.6002.22000

Definition Id: oval:org.mitre.oval:def:1935

Oval ID:	oval:org.mitre.oval:def:1935
Title:	Microsoft Windows Server 2003 SP2 (x86) is installed
Description:	A version of Microsoft Windows Server 2003 Service Pack 2 (x86) is installed.
Family:	windows	Class:	inventory
Reference(s):	cpe:/o:microsoft:windows_server_2003::sp2:x86	Version:	11
Platform(s):	Microsoft Windows Server 2003	Product(s):
Definition Synopsis:
the installed operating system is part of the Microsoft Windows family AND Windows Server 2003 is installed AND a version of Windows for the x86 architecture is installed AND Win2K/XP/2003/Vista/2008 service pack 2 is installed
Referenced By:
oval:org.mitre.oval:def:5882

Definition Id: oval:org.mitre.oval:def:2161

Oval ID:	oval:org.mitre.oval:def:2161
Title:	Microsoft Windows Server 2003 SP2 (x64) is installed
Description:	A version of Microsoft Windows Server 2003 SP2 (x64) is installed.
Family:	windows	Class:	inventory
Reference(s):	cpe:/o:microsoft:windows_2003_server::sp2:x64	Version:	13
Platform(s):	Microsoft Windows Server 2003	Product(s):
Definition Synopsis:
the installed operating system is part of the Microsoft Windows family AND Windows Server 2003 is installed AND a version of Windows for the x64 architecture is installed AND Win2K/XP/2003/Vista/2008 service pack 2 is installed
Referenced By:
oval:org.mitre.oval:def:5882

Definition Id: oval:org.mitre.oval:def:4870

Oval ID:	oval:org.mitre.oval:def:4870
Title:	Microsoft Windows Server 2008 (32-bit) is installed
Description:	The operating system installed on the system is Microsoft Windows Server 2008 (32-bit)
Family:	windows	Class:	inventory
Reference(s):	cpe:/o:microsoft:windows_server_2008:::x86	Version:	6
Platform(s):	Microsoft Windows Server 2008	Product(s):
Definition Synopsis:
the installed operating system is part of the Microsoft Windows family AND Windows Server 2008 is installed AND a version of Windows for the x86 architecture is installed AND NOT Windows Server 2008 R2 is installed
Referenced By:
oval:org.mitre.oval:def:5882 oval:org.mitre.oval:def:5882

Definition Id: oval:org.mitre.oval:def:5356

Oval ID:	oval:org.mitre.oval:def:5356
Title:	Microsoft Windows Server 2008 (64-bit) is installed
Description:	The operating system installed on the system is Microsoft Windows Server 2008 (64-bit)
Family:	windows	Class:	inventory
Reference(s):	cpe:/o:microsoft:windows_server_2008:::x64	Version:	8
Platform(s):	Microsoft Windows Server 2008	Product(s):
Definition Synopsis:
the installed operating system is part of the Microsoft Windows family AND Windows Server 2008 is installed AND a version of Windows for the x64 architecture is installed AND NOT Windows Server 2008 R2 is installed
Referenced By:
oval:org.mitre.oval:def:5882 oval:org.mitre.oval:def:5882

Definition Id: oval:org.mitre.oval:def:5653

Oval ID:	oval:org.mitre.oval:def:5653
Title:	Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed
Description:	The operating system installed on the system is Microsoft Windows Server 2008 (32-bit) Service Pack 2
Family:	windows	Class:	inventory
Reference(s):	cpe:/o:microsoft:windows_server_2008::sp2:x86	Version:	9
Platform(s):	Microsoft Windows Server 2008	Product(s):
Definition Synopsis:
the installed operating system is part of the Microsoft Windows family AND Windows Server 2008 is installed AND a version of Windows for the x86 architecture is installed AND Win2K/XP/2003/Vista/2008 service pack 2 is installed AND NOT Windows Server 2008 R2 is installed
Referenced By:
oval:org.mitre.oval:def:5882 oval:org.mitre.oval:def:5882

Definition Id: oval:org.mitre.oval:def:6216

Oval ID:	oval:org.mitre.oval:def:6216
Title:	Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed
Description:	The operating system installed on the system is Microsoft Windows Server 2008 x64 Edition Service Pack 2
Family:	windows	Class:	inventory
Reference(s):	cpe:/o:microsoft:windows_server_2008::sp2:x64	Version:	11
Platform(s):	Microsoft Windows Server 2008	Product(s):
Definition Synopsis:
the installed operating system is part of the Microsoft Windows family AND Windows Server 2008 is installed AND a version of Windows for the x64 architecture is installed AND Win2K/XP/2003/Vista/2008 service pack 2 is installed
Referenced By:
oval:org.mitre.oval:def:5882 oval:org.mitre.oval:def:5882

Copyright Security-Database 2006-2024 - Powered by themself ;) in 0.0459s

Facebook rss twitter linkedin mail