CVE-2009-0085
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2009-0085
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
The Secure Channel (aka SChannel) authentication component in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008, when certificate authentication is used, does not properly validate the client's key exchange data in Transport Layer Security (TLS) handshake messages, which allows remote attackers to spoof authentication by crafting a TLS packet based on knowledge of the certificate but not the private key, aka "SChannel Spoofing Vulnerability."
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Microsoft Windows SChannel认证欺骗漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Microsoft Windows是美国微软（Microsoft）公司发布的一系列操作系统。 Windows的SChannel(Secure Channel)认证组件在基于证书的认证期间没有充分地验证某些传输层安全(TLS)握手消息。如果攻击者通过其他途径获得了认证所使用的证书的话，就可以仅使用授权用户的数字证书而无需相关私钥就可以认证到服务器。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2009-0085
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2009-0085
Please Login to view more intelligence information
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-007vendor-advisoryx_refsource_MS
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6011vdb-entrysignaturex_refsource_OVAL
- https://nvd.nist.gov/vuln/detail/CVE-2009-0085
Same Patch Batch · n/a · 2009-03-10 · 19 CVEs total
| CVE-2009-0860 | Netcordia NetMRI应用登录错误网页未明向量跨站脚本攻击漏洞 | |
| CVE-2009-0868 | Fujitsu Jasmine2000 Enterprise Edition WebLink HTTP响应分裂漏洞 | |
| CVE-2009-0867 | Fujitsu PRIMERGY BX300刀片服务器信息泄露漏洞 | |
| CVE-2009-0866 | phnews 权限许可和访问控制问题漏洞 | |
| CVE-2009-0865 | GeoVision LiveX ActiveX控件目录遍历漏洞 | |
| CVE-2009-0864 | Matteoiammarrone S-CMS 'logincookie'权限绕过漏洞 | |
| CVE-2009-0863 | Matteoiammarrone S-CMS 'admin/delete_page.php' SQL注入漏洞 | |
| CVE-2009-0862 | TangoCMS 'modules/page/hooks/listeners.php' 跨站脚本攻击漏洞 | |
| CVE-2009-0861 | Denorastats phpDenora IRC Channel Name跨站脚本攻击漏洞 | |
| CVE-2008-3547 | OpenTTD ‘gfx.cpp’ 缓冲区溢出漏洞 | |
| CVE-2009-0870 | Sun Solaris NFS Version 4 Server Kernel Module 本地拒绝服务漏洞 | |
| CVE-2009-0869 | IBM Tivoli HSM for Windows Client 远程缓冲区溢出漏洞 | |
| CVE-2009-0837 | Foxit Reader PDF文件处理多个代码执行漏洞 | |
| CVE-2009-0836 | Foxit Reader PDF文件处理缓冲区溢出和代码执行漏洞 | |
| CVE-2009-0191 | Foxit Reader PDF文件处理远程代码执行漏洞 | |
| CVE-2009-0083 | Microsoft Windows无效指针本地权限提升漏洞 | |
| CVE-2009-0082 | Microsoft Windows内核句柄本地权限提升漏洞 | |
| CVE-2009-0081 | Microsoft Windows Kernel GDI EMF/WMF 远程代码执性漏洞 |
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-8252
Open5GS SMF smf_nsmf_handle_create_data_in_hsmf null pointer - CVE-2026-8251
Open5GS SMF npcf-handler.c update_authorized_pcc_rule_and_qo - CVE-2026-8250
Open5GS SMF n4-build.c smf_n4_build_qos_flow_to_modify_list - CVE-2026-8249
Open5GS SMF npcf-handler.c update_authorized_pcc_rule_and_qo - CVE-2026-8248
Open5GS SMF npcf-handler.c update_authorized_pcc_rule_and_qo
V. Comments for CVE-2009-0085
No comments yet