Design/Logic Flaw

afd.sys in the Ancillary Function Driver AFD component in Microsoft Windows XP SP2 and SP3 and Windows Server 2003 SP1 and SP2 does not properly validate input sent from user mode to the kernel, which allows local users to gain privileges via a crafted application, as demonstrated using crafted...

MS Windows XP/2003 AFD.sys Privilege Escalation Exploit (K-plugin)

Exploit for unknown platform in category local exploits ================================================================== MS Windows XP/2003 AFD.sys Privilege Escalation Exploit K-plugin ================================================================== back: http://inj3ct0r.com/sploits/580.zip...

CVE-2008-3464

CVE-2008-3464 (AFD Kernel Overwrite Vulnerability) is an elevation-of-privilege bug in the Microsoft AFD driver (afd.sys). It arises from improper validation of input passed from user mode to the Windows kernel, allowing a local attacker to execute arbitrary code with kernel privileges. Affected ...

Microsoft Windows SMB缓冲区下溢漏洞（MS08-063）

BUGTRAQ ID: 31647 CVECAN ID: CVE-2008-4038 Microsoft Windows是微软发布的非常流行的操作系统。 Microsoft服务器消息块（SMB）协议处理特制文件名的方式中存在一个缓冲区下溢漏洞。利用该漏洞要求进行认证，因为只有当共享类型为磁盘时才可访问有漏洞的函数。成功利用此漏洞的攻击者可以安装程序；查看、更改或删除数据；或者创建拥有完全用户权限的新帐户。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Vista SP1 Microsoft...

Microsoft Security Bulletin MS08-066 – Important Vulnerability in the Microsoft Ancillary Function Driver Could Allow Elevation of Privilege (956803)

Microsoft Security Bulletin MS08-066 – Important Vulnerability in the Microsoft Ancillary Function Driver Could Allow Elevation of Privilege 956803 Published: October 14, 2008 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability in th...

Windows Kernel Elevation of Privilege Vulnerability (954211)

This host is missing a critical security update according to Microsoft Bulletin MS08-061. OpenVAS Vulnerability Test $Id: secpodms08-061900051.nasl 5934 2017-04-11 12:28:28Z antu123 $ Description: Windows Kernel Elevation of Privilege Vulnerability 954211 Authors: Chandan S Copyright: Copyright C...

SMB Remote Code Execution Vulnerability (957095)

This host is missing a critical security update according to Microsoft Bulletin MS08-063. OpenVAS Vulnerability Test $Id: secpodms08-063900053.nasl 5344 2017-02-18 17:43:17Z cfi $ Description: SMB Remote Code Execution Vulnerability 957095 Authors: Chandan S Copyright: Copyright C 2008 SecPod,...

Microsoft Security Bulletin MS08-062 - Important Vulnerability in Windows Internet Printing Service Could Allow Remote Code Execution (953155)

Microsoft Security Bulletin MS08-062 - Important Vulnerability in Windows Internet Printing Service Could Allow Remote Code Execution 953155 Published: October 14, 2008 Version: 1.0 General Information Executive Summary This update resolves a privately reported vulnerability in the Windows Intern...

Microsoft Outlook Web Access for Exchange Server 2003 - 'redir.asp' Open Redirection

source: https://www.securityfocus.com/bid/31765/info Outlook Web Access is prone to a remote URI-redirection vulnerability because the application fails to properly sanitize user-supplied input. A successful exploit may aid in phishing attacks. OWA 6.5 SP 2 is vulnerable; other versions may also ...

MS08-058: Microsoft Internet Explorer Multiple Vulnerabilities (956390)

The remote host is missing the IE cumulative security update 956390. The remote version of IE is vulnerable to several flaws that could allow an attacker to execute arbitrary code on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid34403;...

Microsoft Excel Remote Code Execution Vulnerability (956416)

This host is missing critical security update according to Microsoft Bulletin MS08-057. OpenVAS Vulnerability Test $Id: secpodms08-057900048.nasl 6538 2017-07-05 11:38:27Z cfischer $ Description: Microsoft Excel Remote Code Execution Vulnerability 956416 Authors: Chandan S Copyright: Copyright C...

Microsoft Security Bulletin MS08-063 – Important Vulnerability in SMB Could Allow Remote Code Execution (957095)

Microsoft Security Bulletin MS08-063 – Important Vulnerability in SMB Could Allow Remote Code Execution 957095 Published: October 14, 2008 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability in Microsoft Server Message Block SMB...

SMB Remote Code Execution Vulnerability (957095)

This host is missing a critical security update according to Microsoft Bulletin MS08-063. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Virtual Address Descriptor Manipulation Elevation of Privilege Vulnerability (956841)

This host is missing important security update according to Microsoft Bulletin MS08-064. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Ancillary Function Driver Elevation of Privilege Vulnerability (956803)

This host is missing important security update according to Microsoft Bulletin MS08-066. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Ancillary Function Driver Elevation of Privilege Vulnerability (956803)

This host is missing important security update according to Microsoft Bulletin MS08-066. OpenVAS Vulnerability Test $Id: secpodms08-066900223.nasl 5370 2017-02-20 15:24:26Z cfi $ Description: Microsoft Ancillary Function Driver Elevation of Privilege Vulnerability 956803 Authors: Veerendra GG...

Microsoft Outlook Web Access for Exchange Server 2003 - redir.asp Open Redirection

Microsoft Outlook Web Access for Exchange Server 2003 - redir.asp Open Redirection source: https://www.securityfocus.com/bid/31765/info Outlook Web Access is prone to a remote URI-redirection vulnerability because the application fails to properly sanitize user-supplied input. A successful exploi...

Cumulative Security Update for Internet Explorer (956390)

This host is missing critical security update according to Microsoft Bulletin MS08-058. OpenVAS Vulnerability Test $Id: secpodms08-058900054.nasl 5934 2017-04-11 12:28:28Z antu123 $ Description: Cumulative Security Update for Internet Explorer 956390 Authors: Chandan S Copyright: Copyright C 2008...

MS08-061: Microsoft Windows Kernel Multiple Privilege Elevation (954211)

The remote host contains a version of the Windows kernel that is vulnerable to a security flaw that could allow a local user to elevate his privileges or to crash it therefore causing a denial of service. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid34406;...

Microsoft Windows Internet打印服务整数溢出漏洞（MS08-062）

BUGTRAQ ID: 31682 CVECAN ID: CVE-2008-1446 Microsoft Windows是微软发布的非常流行的操作系统。 IIS的Internet打印协议ISAPI扩展在处理特制的IPP响应时存在整数溢出漏洞。如果Windows系统上在运行IIS且启用了Internet打印服务的话，远程攻击者可以通过特制的HTTP POST请求诱骗受影响的服务器连接到恶意的IPP服务器来触发这个溢出，导致执行任意指令。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Vista SP1...