Identity Spoofing (Q328145)

[piaqt]

September 04, 2002

Max Risk: Critical

Bulletin: MS02-050 Security Bulletin: http://www.microsoft.com/technet/security/...in/ms02-050.asp for information on obtaining this patch.

Patch Availability: NT 4.0, NT 4.0, Terminal Server Edition, XP, and XP 64 bit Edition.

Issue:

The IETF Profile of the X.509 certificate standard defines several optional fields that can be included in a digital certificate. One of these is the Basic Constraints field, which indicates the maximum allowable length of the certificate's chain and whether the certificate is a Certificate Authority or an end-entity certificate.

Risk Rating:

- Internet systems: Critical

- Intranet systems: Critical

- Client systems: Moderate

XP Download: http://www.microsoft.com/Downloads/Release...ReleaseID=42562