Microsoft Windows LSASS NTLM Implementation Remote Denial of Service Vulnerability

Description Microsoft Windows Local Security Authority Subsystem Service LSASS is prone to a remote denial-of-service vulnerability. A remote attacker can exploit this issue to cause the affected computer to crash and restart, denying service to legitimate users. Technologies Affected Avaya Meeti...

Microsoft GDI+ PNG File Integer Overflow Remote Code Execution Vulnerability

Description Microsoft GDI+ is prone to a remote code-execution vulnerability because the vector graphics link library improperly processes PNG image files. An attacker could exploit this issue to execute arbitrary code with the privileges of the currently logged-in user. Failed exploit attempts m...

Microsoft Security Bulletin MS09-052 - Critical Vulnerability in Windows Media Player Could Allow Remote Code Execution (974112)

Microsoft Security Bulletin MS09-052 - Critical Vulnerability in Windows Media Player Could Allow Remote Code Execution 974112 Published: October 13, 2009 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability in Windows Media Player. T...

Microsoft Security Bulletin MS09-058 - Important Vulnerabilities in Windows Kernel Could Allow Elevation of Privilege (971486)

Microsoft Security Bulletin MS09-058 - Important Vulnerabilities in Windows Kernel Could Allow Elevation of Privilege 971486 Published: October 13, 2009 Version: 1.0 General Information Executive Summary This security update resolves several privately reported vulnerabilities in the Windows kerne...

MS09-054: Cumulative Security Update for Internet Explorer (974455)

The remote host is missing IE Security Update 974455. The remote version of IE is affected by several vulnerabilities that may allow an attacker to execute arbitrary code on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid42110; scriptversion"1.24";...

Microsoft Security Bulletin MS09-051 - Critical Vulnerabilities in Windows Media Runtime Could Allow Remote Code Execution (975682)

Microsoft Security Bulletin MS09-051 - Critical Vulnerabilities in Windows Media Runtime Could Allow Remote Code Execution 975682 Published: October 13, 2009 Version: 1.0 General Information Executive Summary This security update resolves two privately reported vulnerabilities in Windows Media...

Microsoft GDI+ PNG File Processing Remote Code Execution Vulnerability

Description Microsoft GDI+ is prone to a remote code-execution vulnerability because the vector graphics link library improperly processes PNG image files. An attacker could exploit this issue to execute arbitrary code with the privileges of the currently logged-in user. Failed exploit attempts m...

SLES9: Security update for OpenSSH

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: openssh For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5019997 within the SuS...

SLES9: Security update for OpenSSH

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: openssh For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5019997 within the SuS...

Microsoft showHelp (MS04-023; CVE-2003-1041)

An HTML Help URI provides a link to a compiled help file .chm. When a user references this link, Windows will access the resource. To launch the Help URI with the local HTML Help Windows application, the method showHelp can be used. There is a vulnerability in the way Microsoft's HTML help system...

{PRL} Novell Edirectory 8.8 SP5 XSS

Application: Novell Edirectory 8.8 SP5 Platforms: Windows 2003 Server Exploitation: XSS Date: 2009-09-23 Author: Francis Provencher Protek Research Lab's 1 Introduction 2 Technical details and bug 3 The Code =============== 1 Introduction =============== Novell Directory Services is a hierarchica...

Code injection

Unspecified vulnerability in HP ProCurve Identity Driven Manager IDM A.02.x through A.02.03 and A.03.x through A.03.00, on Windows Server 2003 with IAS and Windows Server 2008 with NPS, allows local users to gain privileges via unknown vectors...

Microsoft Windows DNS Devolution Third-Level Domain Name Resolving Weakness (971888)

This host has Microsoft DNS Devolution and is prone to Third-Level Domain Name Resolving Weakness. OpenVAS Vulnerability Test $Id: secpodmsdnsdevolutionresolvingweakness.nasl 5363 2017-02-20 13:07:22Z cfi $ Microsoft Windows DNS Devolution Third-Level Domain Name Resolving Weakness 971888 Authors...

Novell Edirectory 8.8 SP5 - Cross-Site Scripting

Application: Novell Edirectory 8.8 SP5 Platforms: Windows 2003 Server Exploitation: XSS Date: 2009-09-23 Author: Francis Provencher Protek Research Lab's 1 Introduction 2 Technical details and bug 3 The Code =============== 1 Introduction =============== Novell Directory Services is a hierarchica...

Novell Edirectory 8.8 SP5 - Cross-Site Scripting

Novell Edirectory 8.8 SP5 - Cross-Site Scripting Application: Novell Edirectory 8.8 SP5 Platforms: Windows 2003 Server Exploitation: XSS Date: 2009-09-23 Author: Francis Provencher Protek Research Lab's 1 Introduction 2 Technical details and bug 3 The Code =============== 1 Introduction...

Novell Edirectory 8.8 SP5 XSS

Exploit for unknown platform in category web applications ============================= Novell Edirectory 8.8 SP5 XSS ============================= Application: Novell Edirectory 8.8 SP5 Platforms: Windows 2003 Server Exploitation: XSS Date: 2009-09-23 Author: Francis Provencher Protek Research...

Novell Edirectory 8.8 SP5 XSS

No description provided by source. Application: Novell Edirectory 8.8 SP5 Platforms: Windows 2003 Server Exploitation: XSS Date: 2009-09-23 Author: Francis Provencher Protek Research Lab's 1 Introduction 2 Technical details and bug 3 The Code =============== 1 Introduction =============== Novell...

Microsoft Confirms SMB2 Flaw, Heightens Severity

Microsoft has issued a formal security advisory to confirm the remote reboot flaw in its implementation of the SMB2 protocol, going a step further to warn that a successful attack could lead to remote code execution and full system takeover. The vulnerability, which was originally released as a...

Microsoft Windows TCP/IP在处理特制报文中远程拒绝服务漏洞（MS09-048）

BUGTRAQ ID: 36269 CVECAN ID: CVE-2009-1926 Microsoft Windows是微软发布的非常流行的操作系统。 由于处理TCP接收窗口大小很小或为0的特制报文中的错误，导致Microsoft Windows的TCP/IP处理中存在拒绝服务漏洞。如果应用关闭了仍要发送数据的TCP连接且攻击者设置了很小的或为0的TCP接收窗口大小，受影响的服务器就无法彻底关闭TCP连接。攻击者可以通过向系统发送大量特制报文来利用这个漏洞，导致受影响的系统停止响应新的请求。即使在攻击者停止发送恶意报文之后系统仍保持无响应。 Microsoft Windows Vist...

DEBIAN-CVE-2009-3111

The raddecode function in FreeRADIUS before 1.1.8 allows remote attackers to cause a denial of service radiusd crash via zero-length Tunnel-Password attributes, as demonstrated by a certain module in VulnDisco Pack Professional 7.6 through 8.11. NOTE: this is a regression error related to...