Microsoft Windows nsum.exe服务远程栈溢出漏洞（MS10-025）

BUGTRAQ ID: 39356 CVE ID: CVE-2010-0478 Microsoft Windows是微软发布的非常流行的操作系统。 Windows媒体单播服务（nsum.exe）处理传输信息网络报文的方式存在栈溢出漏洞。远程攻击者可以通过向运行可选Windows Media Services组件（非默认安装）的Windows 2000 Server SP4系统发送畸形报文触发这个溢出，导致执行任意代码。 Microsoft Windows 2000 Server SP4 临时解决方法： 停止和禁用Windows媒体单播服务。 使用Windows组件向导卸载Windows...

Windows Media Unicast Service transport information packet buffer overflow

Added: 04/14/2010 CVE: CVE-2010-0478 Background The Windows Media Unicast Service is the part of Windows Media Services which allows streaming media to be sent to a specific user. Problem A buffer overflow vulnerability allows remote attackers to execute arbitrary commands by sending a specially...

Microsoft VBScript Scripting Engine Remote Code Execution Vulnerability (980232)

This host is missing a critical security update according to Microsoft Bulletin MS10-022. OpenVAS Vulnerability Test $Id: secpodms10-022.nasl 5934 2017-04-11 12:28:28Z antu123 $ Microsoft VBScript Scripting Engine Remote Code Execution Vulnerability 980232 Authors: Antu Sanadi Updated By: Madhuri...

Windows Media Unicast Service transport information packet buffer overflow

Added: 04/14/2010 CVE: CVE-2010-0478 Background The Windows Media Unicast Service is the part of Windows Media Services which allows streaming media to be sent to a specific user. Problem A buffer overflow vulnerability allows remote attackers to execute arbitrary commands by sending a specially...

Windows Media Unicast Service transport information packet buffer overflow

Added: 04/14/2010 CVE: CVE-2010-0478 Background The Windows Media Unicast Service is the part of Windows Media Services which allows streaming media to be sent to a specific user. Problem A buffer overflow vulnerability allows remote attackers to execute arbitrary commands by sending a specially...

Microsoft SMB Client Remote Code Execution Vulnerabilities (980232)

This host is missing a critical security update according to Microsoft Bulletin MS10-020. OpenVAS Vulnerability Test $Id: secpodms10-020.nasl 5934 2017-04-11 12:28:28Z antu123 $ Microsoft SMB Client Remote Code Execution Vulnerabilities 980232 Authors: Antu Sanadi Updated By: Madhuri D on...

CVE-2010-0236: Undefined Security Weakness

The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, and Vista Gold does not properly allocate memory for the destination key associated with a symbolic-link registry key, which allows local users to gain privileges via a crafted application, aka "Windows Kernel Memory...

Microsoft MPEG Layer-3 Codecs Remote Code Execution Vulnerability (977816)

This host is missing a critical security update according to Microsoft Bulletin MS10-026. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows Kernel Symbolic Link Creation Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the Windows kernel. An attacker can exploit this issue to execute arbitrary code with kernel-level privileges. Successful exploits will result in the complete compromise of affected computers. Fail...

Microsoft Windows Kernel Registry Key Symbolic Link Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the Windows kernel. An attacker can exploit this issue to execute arbitrary code with kernel-level privileges. Successful exploits will result in the complete compromise of affected computers. Fail...

Microsoft Windows Kernel NULL Pointer Local Denial Of Service Vulnerability

Description Microsoft Windows is prone to a local denial-of-service vulnerability that affects the Windows kernel. Attackers can exploit this issue to cause affected computers to become unresponsive and restart, causing a denial-of-service condition. Due to the nature of this issue, code executio...

Windows Media Services ConnectFunnel Stack Buffer Overflow

This module exploits a stack buffer overflow in the Windows Media Unicast Service version 4.1.0.3930 NUMS.exe. By sending a specially crafted FunnelConnect request, an attacker can execute arbitrary code under the "NetShowServices" user account. Windows Media Services 4.1 ships with Windows 2000...

CVE-2000-1246

The CVE-2000-1246 entry refers to NWFTPD.nlm before 5.01o in the Novell NetWare 5.1 SP3 FTP server. It states that remote authenticated users can trigger a denial of service (abend) by sending RNTO after a failed RNFR command. This affects the FTP server component and the vulnerability causes ava...

CVE-2000-1245

The CVE-2000-1245 entry concerns NWFTPD.nlm before version 5.01o in the Novell NetWare 5.1 SP3 FTP server, where remote attackers could bypass restrictions on anonymous access via unspecified vectors. Public documents do not specify the exact attack vectors, affected configurations beyond the ver...

Microsoft Windows '.ani' file Denial of Service vulnerability

The host has ANI parser in Microsoft Windows and is prone to denial of dervice vulnerability. OpenVAS Vulnerability Test $Id: secpodiedosvuln.nasl 5364 2017-02-20 13:26:07Z cfi $ Microsoft Windows '.ani' file Denial of Service vulnerability Authors: Madhuri D Copyright: Copyright c 2010 SecPod,...

MS10-018: Cumulative Security Update for Internet Explorer (980182)

The remote host is missing IE Security Update 980182. The remote version of IE is affected by several vulnerabilities that may allow an attacker to execute arbitrary code on the remote host. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid45378; scriptversion"1.29";...

UoW IMAPd Server - LSUB Buffer Overflow (Metasploit)

$Id: imapuwlsub.rb 8932 2010-03-26 19:00:23Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

RhinoSoft Serv-U FTP Server - Session Cookie Buffer Overflow (Metasploit)

$Id: servusessioncookie.rb 8762 2010-03-10 05:58:01Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Microsoft Windows XP2000 - Help File Relative Path Remote Command Execution

Microsoft Windows XP2000 - Help File Relative Path Remote Command Execution source: https://www.securityfocus.com/bid/38661/info Microsoft Windows is prone to a remote command-execution vulnerability because it opens help files from unsafe locations. An attacker could exploit this issue by entici...

Microsoft Windows XP/2000 - Help File Relative Path Remote Command Execution

source: https://www.securityfocus.com/bid/38661/info Microsoft Windows is prone to a remote command-execution vulnerability because it opens help files from unsafe locations. An attacker could exploit this issue by enticing a victim to load help files when working in a directory containing crafte...