CERT mailing list archives

Microsoft Releases Security Advisory


From: "US-CERT" <US-CERT () public govdelivery com>
Date: Thu, 15 Aug 2013 12:24:55 -0500

US Computer Emergency Readiness Team banner graphic

National Cyber Awareness System:

Microsoft Releases Security Advisory [ 
https://www.us-cert.gov/ncas/current-activity/2013/08/15/Microsoft-Releases-Security-Advisory ] 08/15/2013 10:36 AM EDT 
Original release date: August 15, 2013

Microsoft has released Security Advisory 2862973 [ http://technet.microsoft.com/en-us/security/advisory/2862973 ] 
impacting applications and services using certificates with the MD5 hashing algorithm. Usage of the MD5 hash algorithm 
in certificates could allow an attacker to spoof content, perform phishing attacks, or perform man-in-the-middle 
attacks.

US-CERT encourages administrators to review Microsoft Security Advisory 2862973 [ 
http://technet.microsoft.com/en-us/security/advisory/2862973 ] and Knowledge Base article 2862966 [ 
http://support.microsoft.com/kb/2862966 ] and follow best practice security policies to determine which updates should 
be applied.

________________________________________________________________________

This product is provided subject to this Notification [ http://www.us-cert.gov/privacy/notification ] and this Privacy 
& Use [ http://www.us-cert.gov/privacy/ ] policy.

________________________________________________________________________

OTHER RESOURCES: Contact Us [ http://www.us-cert.gov/contact-us/ ] | Security Publications [ 
http://www.us-cert.gov/security-publications ] | Alerts and Tips [ http://www.us-cert.gov/ncas ] | Related Resources [ 
http://www.us-cert.gov/related-resources ] 

STAY CONNECTED: Sign up for email updates [ http://public.govdelivery.com/accounts/USDHSUSCERT/subscriber/new ] 


Current thread: