Comparing certificates Experimental feature

You are comparing two certificates. By default, only differing attributes are shown. Use the button below to show/hide all attributes.

Showing only differing attributes.
Citrix XenApp 6.0 for Windows Server 2008 R2 - Platinum Edition
CRP257
Database Engine of Microsoft SQL Server 2005 SP2, Enterprise Edition (English) Version 9.00.3068.00
BSI-DSZ-CC-0366-2008
name Citrix XenApp 6.0 for Windows Server 2008 R2 - Platinum Edition Database Engine of Microsoft SQL Server 2005 SP2, Enterprise Edition (English) Version 9.00.3068.00
category Access Control Devices and Systems Databases
scheme UK DE
not_valid_after 28.02.2016 01.09.2019
not_valid_before 28.02.2011 24.10.2008
report_link https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/crp257.pdf https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/0366a.pdf
st_link https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/t007-st.pdf https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/0366b.pdf
manufacturer Citrix Systems, Inc. Microsoft Corporation
manufacturer_web https://www.citrix.com https://www.microsoft.com
security_level EAL2+, ALC_FLR.2 EAL4+, ALC_FLR.2
dgst d87a9be3bb5e7640 e3e8d64b1e2d40d5
heuristics/cert_id CRP257 BSI-DSZ-CC-0366-2008
heuristics/cert_lab [] BSI
heuristics/direct_transitive_cves CVE-2016-4810, CVE-2016-6493 {}
heuristics/indirect_transitive_cves CVE-2014-4700, CVE-2016-4810, CVE-2016-6493 {}
heuristics/extracted_sars ALC_FLR.2, ADV_ARC.1, ATE_COV.1, AGD_OPE.1, AGD_PRE.1, ALC_DEL.1, ASE_SPD.1, ADV_TDS.1, ASE_OBJ.2, ASE_REQ.2, AVA_VAN.2, ATE_FUN.1, ASE_TSS.1, ATE_IND.2, ALC_CMC.2, ASE_CCL.1, ALC_CMS.2, ASE_ECD.1, ASE_INT.1, ADV_FSP.2 ALC_FLR.2, ADV_LLD.1, AVA_VLA.2, ATE_COV.2, ADV_SPM.1, AVA_SOF.1, AVA_MSU.2, ALC_LCD.1, ATE_FUN.1, ALC_DVS.1, ADV_HLD.2, ATE_IND.2, ADV_RCR.1, ATE_DPT.1, ADV_IMP.1, ALC_TAT.1, AGD_USR.1, AGD_ADM.1, ADV_FSP.2
heuristics/extracted_versions 6.0 9.00.3068.00
heuristics/report_references/directly_referenced_by CRP282 {}
heuristics/report_references/directly_referencing CRP241 CCEVS-VR-0131-2005
heuristics/report_references/indirectly_referenced_by CRP281, CRP282 {}
heuristics/report_references/indirectly_referencing CRP241 CCEVS-VR-0131-2005
heuristics/protection_profiles {} 7d1054ebab3d212f
protection_profile_links {} https://www.commoncriteriaportal.org/nfs/ccpfiles/files/ppfiles/PP_DBMS_BR_V1.0.pdf
pdf_data/report_filename crp257.pdf 0366a.pdf
pdf_data/report_frontpage
  • DE:
  • DE:
    • cert_id: BSI-DSZ-CC-0366-2008
    • cert_item: Database Engine of Microsoft SQL Server 2005 SP2, Enterprise Edition (English) Version 9.00.3068.00
    • cert_lab: BSI
    • developer: Microsoft Corporation
    • match_rules: ['(BSI-DSZ-CC-.+?) (?:for|For) (.+?) from (.*)']
pdf_data/report_keywords/cc_cert_id
  • UK:
    • CRP241: 2
    • CRP257: 1
  • DE:
    • BSI-DSZ-CC-0366: 1
    • BSI-DSZ-CC-0366-2008: 18
  • US:
    • CCEVS-VR-05-0131: 1
pdf_data/report_keywords/cc_security_level
  • EAL:
    • EAL2: 3
    • EAL2 augmented: 2
  • EAL:
    • EAL 1: 1
    • EAL 4: 7
    • EAL 4 augmented: 4
    • EAL 7: 1
    • EAL1: 5
    • EAL2: 3
    • EAL3: 4
    • EAL4: 6
    • EAL5: 6
    • EAL6: 3
    • EAL7: 4
pdf_data/report_keywords/cc_sar
  • ALC:
    • ALC_FLR.2: 3
  • ACM:
    • ACM_AUT: 2
    • ACM_CAP: 2
    • ACM_SCP: 2
  • ADO:
    • ADO_DEL: 2
    • ADO_IGS: 2
  • ADV:
    • ADV_FSP: 2
    • ADV_HLD: 2
    • ADV_IMP: 2
    • ADV_INT: 2
    • ADV_LLD: 2
    • ADV_RCR: 2
    • ADV_SPM: 2
  • AGD:
    • AGD_ADM: 2
    • AGD_USR: 2
  • ALC:
    • ALC_DVS: 2
    • ALC_FLR: 2
    • ALC_FLR.2: 5
    • ALC_LCD: 1
    • ALC_TAT: 2
  • APE:
    • APE_DES: 1
    • APE_ENV: 1
    • APE_INT: 1
    • APE_OBJ: 1
    • APE_REQ: 1
    • APE_SRE: 1
  • ASE:
    • ASE_DES: 1
    • ASE_ENV: 1
    • ASE_INT: 1
    • ASE_OBJ: 1
    • ASE_PPC: 1
    • ASE_REQ: 1
    • ASE_SRE: 1
    • ASE_TSS: 1
  • ATE:
    • ATE_COV: 2
    • ATE_DPT: 2
    • ATE_FUN: 2
    • ATE_IND: 2
  • AVA:
    • AVA_CCA: 2
    • AVA_MSU: 2
    • AVA_SOF: 3
    • AVA_VLA: 3
    • AVA_VLA.2: 1
    • AVA_VLA.3: 1
    • AVA_VLA.4: 1
pdf_data/report_keywords/vendor
  • Microsoft:
    • Microsoft: 1
  • Microsoft:
    • Microsoft: 23
    • Microsoft Corporation: 11
pdf_data/report_keywords/eval_facility
  • TUV:
    • TÜV Informationstechnik: 2
pdf_data/report_keywords/hash_function
  • MD:
    • MD5:
      • MD5: 3
  • SHA:
    • SHA1:
      • SHA-1: 5
pdf_data/report_keywords/crypto_protocol
  • IPsec:
    • IPsec: 4
  • TLS:
    • TLS:
      • TLS: 7
pdf_data/report_keywords/technical_report_id
  • BSI:
    • BSI 7125: 2
    • BSI 7148: 1
    • BSI 7149: 1
pdf_data/report_keywords/tee_name
  • IBM:
    • SE: 1
pdf_data/report_keywords/standard_id
  • CC:
    • CCMB-2009-07-001: 1
    • CCMB-2009-07-002: 1
    • CCMB-2009-07-003: 1
    • CCMB-2009-07-004: 1
  • FIPS:
    • FIPS 140-2: 1
  • BSI:
    • AIS 32: 1
    • AIS 34: 1
    • AIS1: 1
    • AIS11: 1
    • AIS14: 1
    • AIS19: 1
    • AIS23: 1
  • ISO:
    • ISO/IEC 15408:2005: 2
pdf_data/report_keywords/certification_process
  • ConfidentialDocument:
    • Server 2005, Enterprise Edition (English), Version 9.00.3068.00, Size: 360573 bytes, 2008-07-23 (confidential documents) [9] U.S. Government Protection Profile for Database Management Systems in Basic Robustness: 1
    • of Microsoft SQL Server 2005, Enterprise Edition (English) Version 9.00.3068.00, ITSEF: TÜVIT (confidential document) [8] Configuration Management Microsoft SQL Server 2005 Database, Engine Common Criteria Evaluation: 1
pdf_data/report_metadata
  • /Author:
  • /Company: Certification Body, CESG
  • /CreationDate: D:20110302122612Z
  • /Creator: Acrobat PDFMaker 7.0.5 for Word
  • /ModDate: D:20110302154835Z
  • /Producer: Acrobat Elements 7.0.5 (Windows)
  • /Title: Certification Report CRP257
  • /_AdHocReviewCycleID: 1808337809
  • /_AuthorEmail: Nigel.WhittakerAxon@cesg.gsi.gov.uk
  • /_AuthorEmailDisplayName: WhittakerAxon, Nigel
  • /_EmailSubject: Word to PDF
  • pdf_file_size_bytes: 390909
  • pdf_hyperlinks: https://www.citrix.com/lang/English/support.asp
  • pdf_is_encrypted: False
  • pdf_number_of_pages: 20
  • /Author: Bundesamt für Sicherheit in der Informationstechnik
  • /CreationDate: D:20081113135858+01'00'
  • /Creator: Writer
  • /Keywords: "BSI-DSZ-CC-0366-2008, Common Criteria, Certification, Zertifizierung, One Microsoft Way, Redmond, WA 98052-6399, USA, Database Engine of Microsoft SQL Server 2005, Enterprise Edition (English) Version 9.00.3068.00"
  • /ModDate: D:20081117153915+01'00'
  • /Producer: StarOffice 8
  • /Subject: Common Criteria, Certification
  • /Title: Certification Report BSI-DSZ-CC-0366-2008
  • pdf_file_size_bytes: 676834
  • pdf_hyperlinks: {}
  • pdf_is_encrypted: False
  • pdf_number_of_pages: 36
pdf_data/st_filename t007-st.pdf 0366b.pdf
pdf_data/st_keywords/cc_cert_id
  • DE:
    • BSI-DSZ-CC-366: 1
pdf_data/st_keywords/cc_security_level
  • EAL:
    • EAL2: 5
    • EAL2 augmented: 1
  • EAL:
    • EAL 4: 9
    • EAL 4 augmented: 7
    • EAL1: 1
    • EAL4: 3
    • EAL4 augmented: 3
    • EAL4+: 1
pdf_data/st_keywords/cc_sar
  • ADV:
    • ADV_ARC.1: 1
    • ADV_FSP.2: 1
    • ADV_TDS.1: 1
  • AGD:
    • AGD_OPE.1: 1
    • AGD_PRE.1: 1
  • ALC:
    • ALC_CMC.2: 1
    • ALC_CMS.2: 1
    • ALC_DEL.1: 1
    • ALC_FLR.2: 6
  • ASE:
    • ASE_CCL.1: 1
    • ASE_ECD.1: 1
    • ASE_INT.1: 1
    • ASE_OBJ.2: 1
    • ASE_REQ.2: 1
    • ASE_SPD.1: 1
    • ASE_TSS.1: 1
  • ATE:
    • ATE_COV.1: 1
    • ATE_FUN.1: 1
    • ATE_IND.2: 1
  • AVA:
    • AVA_VAN.2: 1
  • ACM:
    • ACM_AUT.1: 1
    • ACM_CAP.4: 1
    • ACM_SCP.2: 1
  • ADO:
    • ADO_DEL.2: 2
    • ADO_IGS.1: 2
  • ADV:
    • ADV_FSP.2: 2
    • ADV_HLD.2: 2
    • ADV_IMP.1: 2
    • ADV_LLD.1: 2
    • ADV_RCR.1: 2
    • ADV_SPM.1: 1
  • AGD:
    • AGD_ADM.1: 2
    • AGD_USR.1: 1
  • ALC:
    • ALC_DVS.1: 1
    • ALC_FLR.2: 16
    • ALC_LCD.1: 1
    • ALC_TAT.1: 1
  • ATE:
    • ATE_COV.2: 2
    • ATE_DPT.1: 1
    • ATE_FUN.1: 2
    • ATE_IND.2: 2
  • AVA:
    • AVA_MSU.2: 2
    • AVA_SOF.1: 2
    • AVA_VLA.2: 6
pdf_data/st_keywords/cc_sfr
  • FCO:
    • FCO_SCO: 8
    • FCO_SCO.1: 8
    • FCO_SCO.1.1: 1
    • FCO_SCO.1.2: 1
    • FCO_SCO.1.3: 2
    • FCO_SCO.1.4: 1
  • FCS:
    • FCS_ECA: 7
    • FCS_ECA.1: 5
    • FCS_ECA.1.1: 1
  • FDP:
    • FDP_ACC: 17
    • FDP_ACC.1: 5
    • FDP_ACF: 14
    • FDP_ACF.1: 10
    • FDP_IFC.1: 1
  • FIA:
    • FIA_ATD: 7
    • FIA_ATD.1: 1
    • FIA_UAU: 6
    • FIA_UAU.2: 1
    • FIA_UID: 8
    • FIA_UID.1: 2
    • FIA_UID.2: 1
  • FMT:
    • FMT_MOF: 8
    • FMT_MOF.1: 1
    • FMT_MSA: 25
    • FMT_MSA.1: 4
    • FMT_MSA.3: 6
    • FMT_SMF: 12
    • FMT_SMF.1: 3
    • FMT_SMR: 14
    • FMT_SMR.1: 6
  • FAU:
    • FAU_GEN: 12
    • FAU_GEN.1: 4
    • FAU_GEN.2: 2
    • FAU_GEN_EXP.2: 10
    • FAU_GEN_EXP.2.1: 1
    • FAU_SEL: 9
    • FAU_SEL.1: 2
    • FAU_STG.1: 1
    • FAU_STG.4: 1
    • FAU_STG_EXP.4: 8
    • FAU_STG_EXP.4.1: 3
  • FCS:
    • FCS_COP.1: 1
  • FDP:
    • FDP_ACC.1: 12
    • FDP_ACC.1.1: 1
    • FDP_ACC.2: 1
    • FDP_ACF: 10
    • FDP_ACF.1: 7
    • FDP_ACF.1.3: 1
    • FDP_IFC.1: 1
    • FDP_RIP.1: 3
    • FDP_RIP.2: 11
    • FDP_RIP.2.1: 1
  • FIA:
    • FIA_ATD.1: 10
    • FIA_ATD.1.1: 2
    • FIA_UAU.1: 1
    • FIA_UAU.2: 9
    • FIA_UAU.2.1: 1
    • FIA_UAU.5: 10
    • FIA_UAU.5.1: 1
    • FIA_UAU.5.2: 1
    • FIA_UID.1: 10
    • FIA_UID.2: 11
    • FIA_UID.2.1: 1
  • FMT:
    • FMT_MOF.1: 8
    • FMT_MOF.1.1: 1
    • FMT_MSA.1: 9
    • FMT_MSA.1.1: 1
    • FMT_MSA.3: 4
    • FMT_MSA.3.2: 1
    • FMT_MSA_EXP.3: 10
    • FMT_MSA_EXP.3.1: 1
    • FMT_MTD.1: 8
    • FMT_MTD.1.1: 1
    • FMT_REV.1: 17
    • FMT_REV.1.1: 2
    • FMT_REV.1.2: 4
    • FMT_SMF.1: 11
    • FMT_SMF.1.1: 2
    • FMT_SMR.1: 16
    • FMT_SMR.1.1: 2
    • FMT_SMR.1.2: 1
  • FPT:
    • FPT_RVM.1: 1
    • FPT_SEP: 1
    • FPT_SEP.1: 4
    • FPT_SEP_EXP.1: 11
    • FPT_SEP_EXP.1.1: 1
    • FPT_SEP_EXP.1.2: 1
    • FPT_STM.1: 2
    • FPT_TRC.1: 1
    • FPT_TRC.1.1: 1
    • FPT_TRC.1.2: 1
    • FPT_TRC_EXP.1: 11
    • FPT_TRC_EXP.1.1: 1
  • FTA:
    • FTA_MCS.1: 9
    • FTA_MCS.1.1: 1
    • FTA_MCS.1.2: 2
    • FTA_TAH.1: 1
    • FTA_TAH_EXP.1: 10
    • FTA_TAH_EXP.1.1: 1
    • FTA_TAH_EXP.1.2: 1
    • FTA_TSE.1: 9
    • FTA_TSE.1.1: 2
pdf_data/st_keywords/cc_claims
  • O:
    • O.TLS-TOE: 10
  • A:
    • A.COMM: 5
    • A.NO_EVIL: 3
    • A.NO_GENERAL_PURPOSE: 3
    • A.OS_PP_VALIDATED: 5
    • A.PHYSICAL: 3
  • O:
    • O.ACCESS_HISTORY: 5
    • O.ADMIN_GUIDANCE: 8
    • O.ADMIN_ROLE: 5
    • O.AUDIT_GENERATION: 4
    • O.CONFIGURATION_IDENTIFICAT: 2
    • O.CONFIGURATION_IDENTIFICATI: 2
    • O.CONFIGURATION_IDENTIFICATIO: 1
    • O.CONFIGURATION_IDENTIFICATION: 3
    • O.DOCUMENTED_DESIGN: 6
    • O.INTERNAL_TOE_DOMAINS: 5
    • O.MANAGE: 5
    • O.MEDIATE: 5
    • O.PARTIAL_FUNCTIONAL_T: 2
    • O.PARTIAL_FUNCTIONAL_TEST: 4
    • O.PARTIAL_SELF_PROTECTI: 2
    • O.PARTIAL_SELF_PROTECTION: 3
    • O.RESIDUAL_INFORMATION: 7
    • O.TOE_ACCESS: 7
    • O.VULNERABILITY_ANALSIS: 1
    • O.VULNERABILITY_ANALY: 1
    • O.VULNERABILITY_ANALYSI: 3
    • O.VULNERABILITY_ANALYSIS: 3
  • OE:
    • OE.COMM: 6
    • OE.NO_EVIL: 4
    • OE.NO_GENERAL_: 2
    • OE.NO_GENERAL_PURPOSE: 1
    • OE.OS_PP_VALIDATED: 5
    • OE.PHYSICAL: 3
  • R:
    • R.COMM: 3
    • R.EVL: 4
  • T:
    • T.ACCIDENTAL_ADMIN_ERR: 1
    • T.ACCIDENTAL_ADMIN_ERROR: 1
    • T.MASQUERADE: 3
    • T.POOR_DESIGN: 3
    • T.POOR_IMPLEMENTATIO: 1
    • T.POOR_IMPLEMENTATION: 2
    • T.POOR_TEST: 3
    • T.RESIDUAL_DATA: 4
    • T.TSF_COMPROMISE: 3
    • T.UNAUTHORIZED_ACCESS: 2
    • T.UNAUTHORIZED_ACCSS: 1
    • T.UNIDENTIFIED_ACTIONS: 3
pdf_data/st_keywords/vendor
  • Microsoft:
    • Microsoft: 18
  • Microsoft:
    • Microsoft: 104
    • Microsoft Corporation: 2
pdf_data/st_keywords/symmetric_crypto
  • AES_competition:
    • AES:
      • AES: 4
  • DES:
    • 3DES:
      • Triple-DES: 2
pdf_data/st_keywords/hash_function
  • SHA:
    • SHA1:
      • SHA-1: 1
pdf_data/st_keywords/crypto_protocol
  • IPsec:
    • IPsec: 1
  • TLS:
    • TLS:
      • TLS: 33
pdf_data/st_keywords/tls_cipher_suite
  • TLS:
    • TLS_RSA_WITH_3DES_EDE_CBC_SHA: 2
pdf_data/st_keywords/tee_name
  • IBM:
    • SE: 16
pdf_data/st_keywords/standard_id
  • CC:
    • CCMB-2009-07-001: 1
    • CCMB-2009-07-002: 1
    • CCMB-2009-07-003: 1
    • CCMB-2009-07-004: 1
  • FIPS:
    • FIPS 140: 3
    • FIPS 140-2: 7
    • FIPS140: 1
    • FIPS140-2: 9
  • CC:
    • CCIMB-2005-08-002: 1
    • CCIMB-2005-08-003: 1
    • CCIMB-2005-08-004: 1
pdf_data/st_keywords/certification_process
  • OutOfScope:
    • and hence all additional functionality supplied by these other products and components, are out of scope. The evaluated configuration covers only the publishing of applications; streaming of applications: 1
    • 22 1.4.3 Summary of items out of scope of the TOE : 1
    • 22 1.4.3 Summary of items out of scope of the TOE ........................................22 1.4.4 Required non-TOE: 1
    • TOE components, they do not form part of the logical boundary of the TOE. 1.4.3 Summary of items out of scope of the TOE The items out of scope of the TOE include the Microsoft components on which Citrix: 1
    • out of scope: 4
pdf_data/st_metadata
  • /Author: SiVenture
  • /CreationDate: D:20110210122512Z
  • /Creator: Microsoft® Office Word 2007
  • /ModDate: D:20110302154939Z
  • /Producer: Microsoft® Office Word 2007
  • /Title: CIN4-STt-0001
  • pdf_file_size_bytes: 679246
  • pdf_hyperlinks: http://www.commoncriteriaportal.org/, http://www.citrix.com/
  • pdf_is_encrypted: False
  • pdf_number_of_pages: 55
  • /Author: Roger French, Microsoft Corporation
  • /CreationDate: D:20080909105655+02'00'
  • /Creator: Acrobat PDFMaker 6.0 for Word
  • /Keywords: CC, ST, Common Criteria, SQL, Security Target
  • /ModDate: D:20081117154129+01'00'
  • /Producer: Acrobat Distiller 6.0.1 (Windows)
  • /SourceModified: D:20080729064854
  • /Subject: Security Target
  • /Title: Microsoft SQL Server 2005 Database Engine Common Criteria Evaluation
  • pdf_file_size_bytes: 1046402
  • pdf_hyperlinks: {}
  • pdf_is_encrypted: False
  • pdf_number_of_pages: 90
state/report/pdf_hash Different Different
state/report/txt_hash Different Different
state/st/pdf_hash Different Different
state/st/txt_hash Different Different