This host is missing an important security update according to Microsoft Bulletin MS12-006.

Successful exploitation of this issue may allow attackers to perform limited man-in-the-middle attacks to inject data into the beginning of the application protocol stream to execute HTTP transactions, bypass authentication. Impact Level: Windows

Run Windows Update and update the listed hotfixes or download and update mentioned hotfixes in the advisory from the below link, http://technet.microsoft.com/en-us/security/bulletin/ms12-006

A flaw exists is due to an error in Microsoft Windows SChannel (Secure Channel), when modifying the way that the Windows Secure Channel (SChannel) component sends and receives encrypted network packets.

Microsoft Windows 7 Service Pack 1 and prior. Microsoft Windows XP Service Pack 3 and prior. Microsoft Windows 2K3 Service Pack 2 and prior. Microsoft Windows Vista Service Pack 1/2 and prior. Microsoft Windows Server 2008 Service Pack 1/2 and prior.

• http://support.microsoft.com/kb/2585542
• http://technet.microsoft.com/en-us/security/bulletin/ms12-006

---

Updated on 2015-03-25