1. Home
  2. CVE Database
  3. CVE-2013-3876
HIGH · 7.1

CVE-2013-3876

DirectAccess in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gol...

Vulnerability Description

DirectAccess in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not properly verify server X.509 certificates, which allows man-in-the-middle attackers to spoof servers and read encrypted domain credentials via a crafted certificate.

CVSS Score

7.1

HIGH

AV:N/AC:M/Au:N/C:C/I:N/A:N
Confidentiality
COMPLETE
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
MicrosoftWindows 7-
MicrosoftWindows 8-
MicrosoftWindows 8.1-
MicrosoftWindows Rt-
MicrosoftWindows Rt 8.1-
MicrosoftWindows Server 2003-
MicrosoftWindows Server 2008-
MicrosoftWindows Server 2012-
MicrosoftWindows Vista-
MicrosoftWindows Xp-

Related Weaknesses (CWE)

CWE-20

References

FAQ

What is CVE-2013-3876?

CVE-2013-3876 is a vulnerability with a CVSS score of 7.1 (HIGH). DirectAccess in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gol...

How severe is CVE-2013-3876?

CVE-2013-3876 has been rated HIGH with a CVSS base score of 7.1/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2013-3876?

Check the references section above for vendor advisories and patch information. Affected products include: Microsoft Windows 7, Microsoft Windows 8, Microsoft Windows 8.1, Microsoft Windows Rt, Microsoft Windows Rt 8.1.