Microsoft Windows NTLM automatically authenticates via SMB when following a file:// URL

🗓️ 13 Apr 2015 00:00:00Reported by CERTType

cert

cert🔗 www.kb.cert.org👁 106 Views

Microsoft Windows NTLM authentication via SMB on malicious file:// URL may lead to credential exposur

Reporter	Title	Published	Views	Family All 69
Tenable Nessus	Flash Player < 26.0.0.151 Multiple Vulnerabilities (APSB17-23)	7 Mar 201900:00	–	nessus
Tenable Nessus	Adobe Flash Player <= 26.0.0.137 Multiple Vulnerabilities (APSB17-23)	8 Aug 201700:00	–	nessus
Tenable Nessus	FreeBSD : Flash Player -- multiple vulnerabilities (7e3d3e9a-7d8f-11e7-a02b-d43d7ef03aa6)	10 Aug 201700:00	–	nessus
Tenable Nessus	GLSA-201709-16 : Adobe Flash Player: Multiple vulnerabilities	25 Sep 201700:00	–	nessus
Tenable Nessus	Adobe Flash Player for Mac <= 26.0.0.137 Multiple Vulnerabilities (APSB17-23)	8 Aug 201700:00	–	nessus
Tenable Nessus	RHEL 6 : flash-plugin (RHSA-2017:2457)	11 Aug 201700:00	–	nessus
Tenable Nessus	KB4034662: Security update for Adobe Flash Player (August 2017)	8 Aug 201700:00	–	nessus
FreeBSD	Flash Player -- multiple vulnerabilities	8 Aug 201700:00	–	freebsd
ArchLinux	[ASA-201708-1] lib32-flashplugin: multiple issues	10 Aug 201700:00	–	archlinux
ArchLinux	[ASA-201708-2] flashplugin: multiple issues	10 Aug 201700:00	–	archlinux

Source	Link
blog	www.blog.cylance.com/redirect-to-smb
technet	www.technet.microsoft.com/en-us/library/security/974926.aspx
technet	www.technet.microsoft.com/en-us/library/security/973811.aspx
technet	www.technet.microsoft.com/en-us/library/jj865668(v=ws.10).aspx
technet	www.technet.microsoft.com/en-us/library/jj865676(v=ws.10).aspx
blogs	www.blogs.technet.com/b/askds/archive/2009/10/08/ntlm-blocking-and-you-application-analysis-and-auditing-methodologies-in-windows-7.aspx
msdn	www.msdn.microsoft.com/en-us/library/ms775122%28v=vs.85%29.aspx
msdn	www.msdn.microsoft.com/en-us/library/ms775123%28v=vs.85%29.aspx
msdn	www.msdn.microsoft.com/en-us/library/aa939357%28v=WinEmbedded.5%29.aspx
msdn	www.msdn.microsoft.com/en-us/library/windows/desktop/aa385483%28v=vs.85%29.aspx

05 Sep 2017 21:58Current

8High risk

Vulners AI Score8

CVSS 24.3

CVSS 3.17.4

EPSS0.00815