CVE:CVE-2009-0085
CNNVD:CNNVD-200903-191
Microsoft Windows是美国微软（Microsoft）公司发布的一系列操作系统。
Windows的SChannel(Secure Channel)认证组件在基于证书的认证期间没有充分地验证某些传输层安全(TLS)握手消息。如果攻击者通过其他途径获得了认证所使用的证书的话，就可以仅使用授权用户的数字证书而无需相关私钥就可以认证到服务器。
solution:Upgrade microsoft windows_2000 to a higher version than *:sp4,and avoid the version *:sp4; Upgrade microsoft windows_server_2003 to a higher version than *,*:sp1,*:sp2,and avoid the version *:sp1,*:sp2; Upgrade microsoft windows_server_2008 to a higher version than *; Upgrade microsoft windows_vista to a higher version than *,*:sp1,gold,and avoid the version *:sp1,gold; Upgrade microsoft windows_xp to a higher version than *,*:sp2,*:sp3,and avoid the version *:sp2,*:sp3