=====================================================================

                           CERT-Renater

               Note d'Information No. 2014/VULN253
_____________________________________________________________________

DATE                : 12/11/2014

HARDWARE PLATFORM(S): /

OPERATING SYSTEM(S): Windows version Server 2003, Vista, Server 2008,
                       Server 2008, Server 2012, 7, 8, 8.1, RT, RT 8.1,
                       Server Core installation option running SChannel.

======================================================================
KB2992611
https://technet.microsoft.com/library/security/ms14-066
______________________________________________________________________

Microsoft Security Bulletin MS14-066: SChannel (2992611)- Critical
Vulnerability in Schannel Could Allow Remote Code Execution

Version: 1.0

Published Date: 11 November, 2014


General Information

Executive Summary

This security update resolves a privately reported vulnerability in the
Microsoft Secure Channel (Schannel) security package in Windows. The
vulnerability could allow remote code execution if an attacker sends
specially crafted packets to a Windows server.

This security update is rated Critical for all supported releases of
Microsoft Windows.


Affected Software

Windows Server 2003 Service Pack 2
Windows Server 2003 x64 Edition Service Pack 2
Windows Server 2003 with SP2 for Itanium-based Systems
Windows Vista Service Pack 2
Windows Vista x64 Edition Service Pack 2
Windows Server 2008 for 32-bit Systems Service Pack 2
Windows Server 2008 for x64-based Systems Service Pack 2
Windows Server 2008 for Itanium-based Systems Service Pack 2
Windows 7 for 32-bit Systems Service Pack 1
Windows 7 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for Itanium-based Systems Service Pack 1
Windows 8 for 32-bit Systems
Windows 8 for x64-based Systems
Windows 8.1 for 32-bit Systems
Windows 8.1 for x64-based Systems
Windows Server 2012
Windows Server 2012 R2
Windows RT
Windows RT 8.1


Vulnerability Information

Microsoft Schannel Remote Code Execution Vulnerability - CVE-2014-6321

A remote code execution vulnerability exists in the Secure Channel
(Schannel) security package due to the improper processing of specially
crafted packets.
Microsoft received information about this vulnerability through
coordinated vulnerability disclosure. When this security bulletin was
issued, Microsoft had not received any information to indicate that
this vulnerability had been publicly used to attack customers.

=========================================================
Serveur de référence du CERT-Renater
https://services.renater.fr/ssi/
==========================================================
+ CERT-RENATER          | tel : 01-53-94-20-44           +
+ 23 - 25 Rue Daviel    | fax : 01-53-94-20-41           +
+ 75013 Paris           | email: cert@support.renater.fr +
==========================================================