Full Disclosure mailing list archives
Re: Unauthorized Digital Certificates Could Allow Spoofing
From: Juha-Matti Laurio <juha-matti.laurio () netti fi>
Date: Mon, 4 Jun 2012 17:25:47 +0300 (EEST)
Certification path of the certificate that was used to sign WUSetupV.exe used by the Flame malware [pic]: https://twitter.com/#!/mikko/status/209620723973636096 Juha-Matti Shreyas Zare [shreyas () secfence com] wrote:
On Mon, Jun 4, 2012 at 7:21 PM, Georgi Guninski <guninski () guninski com> wrote:http://technet.microsoft.com/en-us/security/advisory/2718704 Microsoft is aware of active attacks using unauthorized digital certificates derived from a Microsoft Certificate Authority. what does this mean? m$ inadvertently gave signing rights to lusers, they got rooted or something else?https://blogs.technet.com/b/srd/archive/2012/06/03/microsoft-certification-authority-signing-certificates-added-to-the-untrusted-certificate-store.aspx?Redirected=true https://www.securityweek.com/microsoft-unauthorized-certificate-was-used-sign-flame-malware Shreyas Zare Sr. Information Security Researcher Secfence Technologies www.secfence.com
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- Re: Unauthorized Digital Certificates Could Allow Spoofing Juha-Matti Laurio (Jun 04)