Microsoft Windows DirectAccess CVE-2013-3876 Security Bypass Vulnerability

Bugtraq ID:	63666
Class:	Design Error
CVE:	CVE-2013-3876
Remote:	Yes
Local:	No
Published:	Nov 12 2013 12:00AM
Updated:	Nov 12 2013 12:00AM
Credit:	Daniel Letkiewicz of Google
Vulnerable:	Microsoft Windows XP Service Pack 3 0 Microsoft Windows XP Professional x64 Edition SP2 Microsoft Windows Vista x64 Edition SP2 Microsoft Windows Vista SP1 Microsoft Windows Server 2008 R2 for x64-based Systems SP1 Microsoft Windows Server 2008 for x64-based Systems SP2 Microsoft Windows Server 2008 for Itanium-based Systems SP2 Microsoft Windows Server 2008 for 32-bit Systems SP2 Microsoft Windows Server 2003 Itanium SP2 Microsoft Windows Server 2003 SP2 Microsoft Windows 7 for x64-based Systems SP1 Microsoft Windows 7 for 32-bit Systems SP1
Not Vulnerable:

Microsoft Windows DirectAccess CVE-2013-3876 Security Bypass Vulnerability

Microsoft Windows DirectAccess is prone to a security-bypass vulnerability.

An attacker can exploit this issue to bypass certain security restrictions and impersonate a legitimate server to perform man-in-the-middle attacks.

Successfully exploiting this issue allows attackers to obtain sensitive information including encrypted domain credentials. Other attacks are also possible.

Microsoft Windows DirectAccess CVE-2013-3876 Security Bypass Vulnerability

An attacker can exploit this issue using readily available tools.

Microsoft Windows DirectAccess CVE-2013-3876 Security Bypass Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Microsoft Windows DirectAccess CVE-2013-3876 Security Bypass Vulnerability

References:

• Microsoft Homepage (Microsoft)
  
• Microsoft Security Advisory (2862152) (Microsoft)