oval:org.mitre.oval:def:7569

Definition Id: oval:org.mitre.oval:def:7569

Oval ID:	oval:org.mitre.oval:def:7569
Title:	WinINet and Windows HTTP Services Credential Reflection Vulnerability
Description:	Windows HTTP Services (aka WinHTTP) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008; and WinINet in Microsoft Internet Explorer 5.01 SP4, 6 SP1, 6 and 7 on Windows XP SP2 and SP3, 6 and 7 on Windows Server 2003 SP1 and SP2, 7 on Windows Vista Gold and SP1, and 7 on Windows Server 2008; allows remote web servers to capture and replay NTLM credentials, and execute arbitrary code, via vectors related to absence of a "credential-reflection protections" opt-in step, aka "Windows HTTP Services Credential Reflection Vulnerability" and "WinINet Credential Reflection Vulnerability."
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2009-0550	Version:	8
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows Server 2008	Product(s):	Microsoft Internet Explorer
Definition Synopsis:
IE5/Microsoft Windows 2000 Microsoft Windows 2000 is installed AND Microsoft Internet Explorer 5.01 SP4 is installed AND Mshtml.dll version is less than 5.0.3874.1900 OR IE6/Microsoft Windows 2000 Microsoft Windows 2000 is installed AND Microsoft Internet Explorer 6 is installed AND Mshtml.dll version is less than 6.0.2800.1625 OR IE6/Microsoft Windows XP Microsoft Windows XP is installed AND Microsoft Internet Explorer 6 is installed AND Mshtml.dll version is less than 6.0.2900.3527 OR IE6/Microsoft Windows XP (32-bit) Microsoft Windows XP (32-bit) is installed AND Microsoft Internet Explorer 6 is installed AND Mshtml.dll version is less than 6.0.2900.5764 OR IE6/Microsoft Server 2003 (32-bit) Microsoft Windows Server 2003 (32-bit) is installed AND Microsoft Internet Explorer 6 is installed AND Mshtml.dll version is less than 6.0.3790.3304 OR IE6/Microsoft Server 2003 (32-bit) Microsoft Windows Server 2003 (32-bit) is installed AND Microsoft Internet Explorer 6 is installed AND Mshtml.dll version is less than 6.0.3790.4470 OR IE6/XP x64/Server 2003 x64 XP x64/Server 2003 x64 Microsoft Windows XP x64 is installed AND Microsoft Windows Server 2003 (x64) is installed AND Microsoft Internet Explorer 6 is installed AND Mshtml.dll version is less than 6.0.3790.3304 OR IE6/XP x64/Server 2003 x64 XP x64/Server 2003 x64 Microsoft Windows XP x64 is installed AND Microsoft Windows Server 2003 (x64) is installed AND Microsoft Internet Explorer 6 is installed AND Mshtml.dll version is less than 6.0.3790.4470 OR IE6/Server 2003 ia64 Microsoft Windows Server 2003 (ia64) Gold is installed AND Microsoft Internet Explorer 6 is installed AND Mshtml.dll version is less than 6.0.3790.3304 OR IE6/Server 2003 ia64 Microsoft Windows Server 2003 (ia64) Gold is installed AND Microsoft Internet Explorer 6 is installed AND Mshtml.dll version is less than 6.0.3790.4470 OR IE7/XP x86/x64 XP x86/x64 Microsoft Windows XP (32-bit) is installed AND Microsoft Windows XP x64 is installed AND Microsoft Internet Explorer 7 is installed AND Mshtml.dll version is greater than 7.0.6000.16000 AND Mshtml.dll version is less than 7.0.6000.16825 OR IE7/XP x86/x64 XP x86/x64 Microsoft Windows XP (32-bit) is installed AND Microsoft Windows XP x64 is installed AND Microsoft Internet Explorer 7 is installed AND Mshtml.dll version is greater than 7.0.6000.20000 AND Mshtml.dll version is less than 7.0.6000.21015 OR IE7/Server 2003 x86/x64/ia64 Server 2003 x86/x64/ia64 Microsoft Windows Server 2003 (32-bit) is installed AND Microsoft Windows Server 2003 (x64) is installed AND Microsoft Windows Server 2003 (ia64) Gold is installed AND Microsoft Internet Explorer 7 is installed AND Mshtml.dll version is greater than 7.0.6000.16000 AND Mshtml.dll version is less than 7.0.6000.16825 OR IE7/Server 2003 x86/x64/ia64 Server 2003 x86/x64/ia64 Microsoft Windows Server 2003 (32-bit) is installed AND Microsoft Windows Server 2003 (x64) is installed AND Microsoft Windows Server 2003 (ia64) Gold is installed AND Microsoft Internet Explorer 7 is installed AND Mshtml.dll version is greater than 7.0.6000.20000 AND Mshtml.dll version is less than 7.0.6000.21015 OR Mshtml.dll/Vista x86/x64 Vista x86/x64 Microsoft Windows Vista (32-bit) is installed AND Microsoft Windows Vista x64 Edition is installed AND Mshtml.dll version is greater than 7.0.6000.16000 AND Mshtml.dll version is less than 7.0.6000.16830 OR Mshtml.dll/Vista x86/x64 Vista x86/x64 Microsoft Windows Vista (32-bit) is installed AND Microsoft Windows Vista x64 Edition is installed AND Mshtml.dll version is greater than 7.0.6000.20000 AND Mshtml.dll version is less than 7.0.6000.21023 OR Mshtml.dll/Vista x86/x64, Server 2008 x86/x64/ia64 Vista x86/x64, Server 2008 x86/x64/ia64 Microsoft Windows Vista (32-bit) is installed AND Microsoft Windows Vista x64 Edition is installed AND Microsoft Windows Server 2008 (32-bit) is installed AND Microsoft Windows Server 2008 (64-bit) is installed AND Microsoft Windows Server 2008 (ia-64) is installed AND Mshtml.dll version is greater than 7.0.6001.16000 AND Mshtml.dll version is less than 7.0.6001.18226 OR Mshtml.dll/Vista x86/x64, Server 2008 x86/x64/ia64 Vista x86/x64, Server 2008 x86/x64/ia64 Microsoft Windows Vista (32-bit) is installed AND Microsoft Windows Vista x64 Edition is installed AND Microsoft Windows Server 2008 (32-bit) is installed AND Microsoft Windows Server 2008 (64-bit) is installed AND Microsoft Windows Server 2008 (ia-64) is installed AND Mshtml.dll version is greater than 7.0.6001.20000 AND Mshtml.dll version is less than 7.0.6001.22389 OR winhttp.dll version 5.1.2600.3490 or later on Windows 2000 Microsoft Windows 2000 is installed AND system32\winhttp.dll version less than 5.1.2600.3490 OR winhttp.dll versin 5.1.2600.3494 or later on Windows XP x86 Microsoft Windows XP (32-bit) is installed AND system32\winhttp.dll version less than 5.1.2600.3494 OR winhttp.dll versin 5.1.2600.5727 or later on Windows XP x86 Microsoft Windows XP (32-bit) is installed AND system32\winhttp.dll version less than 5.1.2600.5727 OR winhttp.dll versin 5.2.3790.3262 or later on Windows XP x64 Microsoft Windows XP x64 is installed AND system32\winhttp.dll version less than 5.2.3790.3262 OR winhttp.dll versin 5.2.3790.4427 or later on Windows XP x64 Microsoft Windows XP x64 is installed AND system32\winhttp.dll version less than 5.2.3790.4427 OR winhttp.dll versin 5.2.3790.3262 or later on windows server 2003 (x86)(x64)(ia64) Server 2003 x86/x64/ia64 Microsoft Windows Server 2003 (32-bit) is installed AND Microsoft Windows Server 2003 (x64) is installed AND Microsoft Windows Server 2003 (ia64) Gold is installed AND Winsxs\winhttp.dll version less than 5.2.3790.3262 OR winhttp.dll versin 5.2.3790.4427 or later on windows server 2003 (x86)(x64)(ia64) Server 2003 x86/x64/ia64 Microsoft Windows Server 2003 (32-bit) is installed AND Microsoft Windows Server 2003 (x64) is installed AND Microsoft Windows Server 2003 (ia64) Gold is installed AND Winsxs\winhttp.dll version less than 5.2.3790.4427 OR winhttp.dll versin 6.0.6000.16786 or later on windows vista GDR (x86)(x64) Vista x86/x64 Microsoft Windows Vista (32-bit) is installed AND Microsoft Windows Vista x64 Edition is installed AND system32\winhttp.dll version greater than or equal 6.0.6000.16000 AND system32\winhttp.dll version less than 6.0.6000.16786 OR winhttp.dll versin 6.0.6000.20971 or later on windows vista LDR (x86)(x64) Vista x86/x64 Microsoft Windows Vista (32-bit) is installed AND Microsoft Windows Vista x64 Edition is installed AND system32\winhttp.dll version greater than or equal 6.0.6000.20000 AND system32\winhttp.dll version less than 6.0.6000.20971 OR winhttp.dll versin 6.0.6001.18178 or later on windows server 2008 sp1 GDR (x86)(x64)(ia64) and windows vista sp1 GDR (x86)(x64) Vista x86/x64, Server 2008 x86/x64/ia64 Microsoft Windows Vista (32-bit) is installed AND Microsoft Windows Vista x64 Edition is installed AND Microsoft Windows Server 2008 (32-bit) is installed AND Microsoft Windows Server 2008 (64-bit) is installed AND Microsoft Windows Server 2008 (ia-64) is installed AND system32\winhttp.dll version greater than or equal 6.0.6001.18000 AND system32\winhttp.dll version less than 6.0.6001.18178 OR winhttp.dll versin 6.0.6001.22323 or later on windows server 2008 sp1 LDR (x86)(x64)(ia64) and windows vista sp1 GDR (x86)(x64) Vista x86/x64, Server 2008 x86/x64/ia64 Microsoft Windows Vista (32-bit) is installed AND Microsoft Windows Vista x64 Edition is installed AND Microsoft Windows Server 2008 (32-bit) is installed AND Microsoft Windows Server 2008 (64-bit) is installed AND Microsoft Windows Server 2008 (ia-64) is installed AND system32\winhttp.dll version greater than or equal 6.0.6001.22000 AND system32\winhttp.dll version less than 6.0.6001.22323

Definition Id: oval:org.mitre.oval:def:563

Oval ID:	oval:org.mitre.oval:def:563
Title:	Microsoft Internet Explorer 6 is installed
Description:	The application Microsoft Internet Explorer 6 is installed.
Family:	windows	Class:	inventory
Reference(s):	cpe:/a:microsoft:ie:6	Version:	8
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003	Product(s):	Microsoft Internet Explorer 6
Definition Synopsis:
Internet Explorer 6 (any patch level) is installed
Referenced By:
oval:org.mitre.oval:def:7569 oval:org.mitre.oval:def:7569 oval:org.mitre.oval:def:7569 oval:org.mitre.oval:def:7569 oval:org.mitre.oval:def:7569 oval:org.mitre.oval:def:7569 oval:org.mitre.oval:def:7569 oval:org.mitre.oval:def:7569 oval:org.mitre.oval:def:7569

Definition Id: oval:org.mitre.oval:def:85

Oval ID:	oval:org.mitre.oval:def:85
Title:	Microsoft Windows 2000 is installed
Description:	The operating system installed on the system is Microsoft Windows 2000.
Family:	windows	Class:	inventory
Reference(s):	cpe:/o:microsoft:windows_2000	Version:	5
Platform(s):	Microsoft Windows 2000	Product(s):
Definition Synopsis:
the installed operating system is part of the Microsoft Windows family AND Windows 2000 is installed
Referenced By:
oval:org.mitre.oval:def:7569 oval:org.mitre.oval:def:7569 oval:org.mitre.oval:def:7569

Definition Id: oval:org.mitre.oval:def:1282

Oval ID:	oval:org.mitre.oval:def:1282
Title:	Microsoft Windows Vista (32-bit) is installed
Description:	The operating system installed on the system is Microsoft Windows Vista (32-bit)
Family:	windows	Class:	inventory
Reference(s):	cpe:/o:microsoft:windows_vista:::x86	Version:	4
Platform(s):	Microsoft Windows Vista	Product(s):
Definition Synopsis:
the installed operating system is part of the Microsoft Windows family AND Windows Vista is installed AND a version of Windows for the x86 architecture is installed
Referenced By:
oval:org.mitre.oval:def:7569 oval:org.mitre.oval:def:7569 oval:org.mitre.oval:def:7569 oval:org.mitre.oval:def:7569 oval:org.mitre.oval:def:7569 oval:org.mitre.oval:def:7569 oval:org.mitre.oval:def:7569 oval:org.mitre.oval:def:7569

Definition Id: oval:org.mitre.oval:def:2041

Oval ID:	oval:org.mitre.oval:def:2041
Title:	Microsoft Windows Vista x64 Edition is installed
Description:	The operating system installed on the system is Microsoft Windows Vista x64 Edition
Family:	windows	Class:	inventory
Reference(s):	cpe:/o:microsoft:windows_vista:::x64	Version:	6
Platform(s):	Microsoft Windows Vista	Product(s):
Definition Synopsis:
the installed operating system is part of the Microsoft Windows family AND Windows Vista is installed AND a version of Windows for the x64 architecture is installed
Referenced By:
oval:org.mitre.oval:def:7569 oval:org.mitre.oval:def:7569 oval:org.mitre.oval:def:7569 oval:org.mitre.oval:def:7569 oval:org.mitre.oval:def:7569 oval:org.mitre.oval:def:7569 oval:org.mitre.oval:def:7569 oval:org.mitre.oval:def:7569

Definition Id: oval:org.mitre.oval:def:627

Oval ID:	oval:org.mitre.oval:def:627
Title:	Microsoft Internet Explorer 7 is installed
Description:	A version of Microsoft Internet Explorer 7 is installed.
Family:	windows	Class:	inventory
Reference(s):	cpe:/a:microsoft:ie:7	Version:	6
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista	Product(s):	Microsoft Internet Explorer 7
Definition Synopsis:
Internet Explorer 7 is installed
Referenced By:
oval:org.mitre.oval:def:7569 oval:org.mitre.oval:def:7569 oval:org.mitre.oval:def:7569 oval:org.mitre.oval:def:7569

Definition Id: oval:org.mitre.oval:def:4870

Oval ID:	oval:org.mitre.oval:def:4870
Title:	Microsoft Windows Server 2008 (32-bit) is installed
Description:	The operating system installed on the system is Microsoft Windows Server 2008 (32-bit)
Family:	windows	Class:	inventory
Reference(s):	cpe:/o:microsoft:windows_server_2008:::x86	Version:	6
Platform(s):	Microsoft Windows Server 2008	Product(s):
Definition Synopsis:
the installed operating system is part of the Microsoft Windows family AND Windows Server 2008 is installed AND a version of Windows for the x86 architecture is installed AND NOT Windows Server 2008 R2 is installed
Referenced By:
oval:org.mitre.oval:def:7569 oval:org.mitre.oval:def:7569 oval:org.mitre.oval:def:7569 oval:org.mitre.oval:def:7569

Definition Id: oval:org.mitre.oval:def:5356

Oval ID:	oval:org.mitre.oval:def:5356
Title:	Microsoft Windows Server 2008 (64-bit) is installed
Description:	The operating system installed on the system is Microsoft Windows Server 2008 (64-bit)
Family:	windows	Class:	inventory
Reference(s):	cpe:/o:microsoft:windows_server_2008:::x64	Version:	8
Platform(s):	Microsoft Windows Server 2008	Product(s):
Definition Synopsis:
the installed operating system is part of the Microsoft Windows family AND Windows Server 2008 is installed AND a version of Windows for the x64 architecture is installed AND NOT Windows Server 2008 R2 is installed
Referenced By:
oval:org.mitre.oval:def:7569 oval:org.mitre.oval:def:7569 oval:org.mitre.oval:def:7569 oval:org.mitre.oval:def:7569

Definition Id: oval:org.mitre.oval:def:5667

Oval ID:	oval:org.mitre.oval:def:5667
Title:	Microsoft Windows Server 2008 (ia-64) is installed
Description:	The operating system installed on the system is Microsoft Windows Server 2008 Itanium Edition
Family:	windows	Class:	inventory
Reference(s):	cpe:/o:microsoft:windows_server_2008:::itanium	Version:	6
Platform(s):	Microsoft Windows Server 2008	Product(s):
Definition Synopsis:
the installed operating system is part of the Microsoft Windows family AND Windows Server 2008 is installed AND a version of Windows for the ia64 architecture is installed AND NOT Windows Server 2008 R2 is installed
Referenced By:
oval:org.mitre.oval:def:7569 oval:org.mitre.oval:def:7569 oval:org.mitre.oval:def:7569 oval:org.mitre.oval:def:7569

Definition Id: oval:org.mitre.oval:def:325

Oval ID:	oval:org.mitre.oval:def:325
Title:	Microsoft Internet Explorer 5.01 SP4 is installed
Description:	The application Microsoft Internet Explorer 5.01 SP4 is installed.
Family:	windows	Class:	inventory
Reference(s):	cpe:/a:microsoft:ie:5.00.3700.1000	Version:	7
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003	Product(s):	Microsoft Internet Explorer 5
Definition Synopsis:
Internet Explorer 5.01 Service Pack 4 is installed
Referenced By:
oval:org.mitre.oval:def:7569

Definition Id: oval:org.mitre.oval:def:1870

Oval ID:	oval:org.mitre.oval:def:1870
Title:	Microsoft Windows Server 2003 (32-bit) is installed
Description:	A version of Microsoft Windows Server 2003 (32-bit) is installed.
Family:	windows	Class:	inventory
Reference(s):	cpe:/o:microsoft:windows_server_2003:::x86	Version:	8
Platform(s):	Microsoft Windows Server 2003	Product(s):
Definition Synopsis:
the installed operating system is part of the Microsoft Windows family AND Windows Server 2003 is installed AND a version of Windows for the x86 architecture is installed
Referenced By:
oval:org.mitre.oval:def:7569 oval:org.mitre.oval:def:7569 oval:org.mitre.oval:def:7569 oval:org.mitre.oval:def:7569 oval:org.mitre.oval:def:7569 oval:org.mitre.oval:def:7569

Definition Id: oval:org.mitre.oval:def:730

Oval ID:	oval:org.mitre.oval:def:730
Title:	Microsoft Windows Server 2003 (x64) is installed
Description:	A version of Microsoft Windows Server 2003 (x64) is installed.
Family:	windows	Class:	inventory
Reference(s):	cpe:/o:microsoft:windows_server_2003:::x64	Version:	11
Platform(s):	Microsoft Windows Server 2003	Product(s):
Definition Synopsis:
the installed operating system is part of the Microsoft Windows family AND Windows Server 2003 is installed AND a version of Windows for the x64 architecture is installed
Referenced By:
oval:org.mitre.oval:def:7569 oval:org.mitre.oval:def:7569 oval:org.mitre.oval:def:7569 oval:org.mitre.oval:def:7569 oval:org.mitre.oval:def:7569 oval:org.mitre.oval:def:7569

Definition Id: oval:org.mitre.oval:def:105

Oval ID:	oval:org.mitre.oval:def:105
Title:	Microsoft Windows XP is installed
Description:	The operating system installed on the system is Microsoft Windows XP.
Family:	windows	Class:	inventory
Reference(s):	cpe:/o:microsoft:windows_xp	Version:	5
Platform(s):	Microsoft Windows XP	Product(s):
Definition Synopsis:
the installed operating system is part of the Microsoft Windows family AND Windows XP is installed
Referenced By:
oval:org.mitre.oval:def:7569

Definition Id: oval:org.mitre.oval:def:396

Oval ID:	oval:org.mitre.oval:def:396
Title:	Microsoft Windows Server 2003 (ia64) Gold is installed
Description:	A version of Microsoft Windows Server 2003 (ia64) Gold is installed.
Family:	windows	Class:	inventory
Reference(s):	cpe:/o:microsoft:windows_server_2003::-:itanium	Version:	11
Platform(s):	Microsoft Windows Server 2003	Product(s):
Definition Synopsis:
the installed operating system is part of the Microsoft Windows family AND Windows Server 2003 is installed AND a version of Windows for the ia64 architecture is installed AND NOT Win2K/XP/2003 is patched
Referenced By:
oval:org.mitre.oval:def:7569 oval:org.mitre.oval:def:7569 oval:org.mitre.oval:def:7569 oval:org.mitre.oval:def:7569 oval:org.mitre.oval:def:7569 oval:org.mitre.oval:def:7569

Definition Id: oval:org.mitre.oval:def:15247

Oval ID:	oval:org.mitre.oval:def:15247
Title:	Microsoft Windows XP x64 is installed
Description:	A version of Microsoft Windows XP x64 is installed.
Family:	windows	Class:	inventory
Reference(s):	cpe:/o:microsoft:windows_xp::x64	Version:	5
Platform(s):	Microsoft Windows XP	Product(s):
Definition Synopsis:
the installed operating system is part of the Microsoft Windows family AND Windows XP is installed AND a version of Windows for the x64 architecture is installed
Referenced By:
oval:org.mitre.oval:def:7569 oval:org.mitre.oval:def:7569 oval:org.mitre.oval:def:7569 oval:org.mitre.oval:def:7569 oval:org.mitre.oval:def:7569 oval:org.mitre.oval:def:7569

Definition Id: oval:org.mitre.oval:def:1353

Oval ID:	oval:org.mitre.oval:def:1353
Title:	Microsoft Windows XP (32-bit) is installed
Description:	The operating system installed on the system is Microsoft Windows XP (32-bit).
Family:	windows	Class:	inventory
Reference(s):	cpe:/o:microsoft:windows_xp:::x86	Version:	4
Platform(s):	Microsoft Windows XP	Product(s):
Definition Synopsis:
the installed operating system is part of the Microsoft Windows family AND Windows XP is installed AND a version of Windows for the x86 architecture is installed
Referenced By:
oval:org.mitre.oval:def:7569 oval:org.mitre.oval:def:7569 oval:org.mitre.oval:def:7569 oval:org.mitre.oval:def:7569 oval:org.mitre.oval:def:7569

Copyright Security-Database 2006-2024 - Powered by themself ;) in 0.0708s

Facebook rss twitter linkedin mail