Null pointer dereference

The Netlogon RPC Service in Microsoft Windows Server 2003 SP2 and Server 2008 Gold, SP2, and R2, when the domain controller role is enabled, allows remote attackers to cause a denial of service NULL pointer dereference and reboot via a crafted RPC packet, aka "Netlogon RPC Null dereference DOS...

Design/Logic Flaw

Microsoft Exchange Server 2007 SP2 on the x64 platform allows remote authenticated users to cause a denial of service infinite loop and MSExchangeIS outage via a crafted RPC request, aka "Exchange Server Infinite Loop Vulnerability."...

CVE-2010-2742

The Netlogon RPC Service in Microsoft Windows Server 2003 SP2 and Server 2008 Gold, SP2, and R2, when the domain controller role is enabled, allows remote attackers to cause a denial of service NULL pointer dereference and reboot via a crafted RPC packet, aka "Netlogon RPC Null dereference DOS...

CVE-2010-3937

CVE-2010-3937 affects Microsoft Exchange Server 2007 SP2 on x64. The vulnerability is in RPC processing that allows a remote authenticated attacker to trigger a denial of service, causing an infinite loop and MSExchangeIS outage. Multiple sources (MS10-106) indicate this can be exploited via spec...

CVE-2010-2742

The CVE affects the Netlogon RPC Service in Windows Server 2003 SP2 and Windows Server 2008 Gold/SP2/R2 when the domain controller role is enabled. A remote attacker can trigger a denial-of-service via a crafted Netlogon RPC packet, causing a NULL pointer dereference and reboot. The issue is docu...

CVE-2010-3937

Microsoft Exchange Server 2007 SP2 on the x64 platform allows remote authenticated users to cause a denial of service infinite loop and MSExchangeIS outage via a crafted RPC request, aka "Exchange Server Infinite Loop Vulnerability."...

CVE-2010-3937: Undefined Security Weakness

Microsoft Exchange Server 2007 SP2 on the x64 platform allows remote authenticated users to cause a denial of service infinite loop and MSExchangeIS outage via a crafted RPC request, aka "Exchange Server Infinite Loop Vulnerability."...

CVE-2010-2742: Undefined Security Weakness

The Netlogon RPC Service in Microsoft Windows Server 2003 SP2 and Server 2008 Gold, SP2, and R2, when the domain controller role is enabled, allows remote attackers to cause a denial of service NULL pointer dereference and reboot via a crafted RPC packet, aka "Netlogon RPC Null dereference DOS...

PT-2010-4258

Name of the Vulnerable Software and Affected Versions Microsoft Windows Server 2003 SP2 Microsoft Windows Server 2008 Gold, SP2, and R2 Description The issue concerns a denial of service NULL pointer dereference and reboot in the Netlogon RPC Service when the domain controller role is enabled. Th...

Microsoft Windows Netlogon Service Denial of Service Vulnerability (2207559)

This host is missing a critical security update according to Microsoft Bulletin MS10-101. OpenVAS Vulnerability Test $Id: secpodms10-101.nasl 5361 2017-02-20 11:57:13Z cfi $ Microsoft Windows Netlogon Service Denial of Service Vulnerability 2207559 Authors: Antu Sanadi Copyright: Copyright c 2010...

MS-RPC over CIFS Fragmentation (CVE-2010-0102)

DCE/RPC stands for Distributed Computing Environment / Remote Procedure Calls. It is a Remote Procedure Call system that allows software to work across multiple computers, as if it were all working on the same computer. This system allows programmers to write distributed software without having t...

DCE-RPC Fragmented Requests (CVE-2010-0102)

DCE/RPC stands for Distributed Computing Environment / Remote Procedure Calls. It is a Remote Procedure Call system that allows software to work across multiple computers, as if it were all working on the same computer. This system allows programmers to write distributed software without having t...

DCE-RPC Invalid NDR Value Evasion Technique (CVE-2010-0102)

DCE/RPC stands for Distributed Computing Environment / Remote Procedure Calls. It is a Remote Procedure Call system that allows software to work across multiple computers, as if it were all working on the same computer. This system allows programmers to write distributed software without having t...

Microsoft Exchange Server DoS

Endless loop on RPC request processing...

Microsoft Windows Netlogon Service Denial of Service Vulnerability (2207559)

This host is missing a critical security update according to Microsoft Bulletin MS10-101. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS10-101: Vulnerability in Windows Netlogon Service Could Allow Denial of Service (2207559)

The remote Windows host contains a version of the NetLogon RPC service that is affected by a denial of service vulnerability. An attacker with administrative privileges on a machine that is joined to the same domain as the affected domain controller could cause a denial of service by sending a...

MS10-106: Vulnerability in Microsoft Exchange Server Could Allow Denial of Service (2407132)

The version of Microsoft Exchange 2007 running on the remote host has a denial of service vulnerability. The Exchange service does not process specially crafted RPC calls correctly, resulting in an infinite loop. A remote, authenticated attacker could exploit this by making a specially crafted RP...

PT-2010-5176

Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server 2007 SP2 on the x64 platform Microsoft Exchange 2007 Description A denial of service issue exists due to the way the Microsoft Exchange store processes specially crafted RPC calls. The vulnerable code path is only...

CentOS Update for php CESA-2010:0919 centos4 i386

Check for the Version of php OpenVAS Vulnerability Test CentOS Update for php CESA-2010:0919 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

SuSE 11 / 11.1 Security Update : glibc (SAT Patch Numbers 3392 / 3393)

This update of glibc fixes various bugs and security issues : - Decoding of the $ORIGIN special value in various LD environment variables allowed local attackers to execute code in context of e.g. setuid root programs, elevating privileges. This issue does not affect SUSE as an assertion triggers...