Oracle Endeca Server Remote Command Execution

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Oracle Endeca Server Remote Command...

Blue Coat ICAP Patience Page XSS

The remote host is running a version of Blue Coat ProxySG that suffers from a XSS issue. An attacker can exploit this issue by sending a malicious link that will redirect the user to the ICAP 'Patience' page which will echo the link back, unfiltered. %NASLMINLEVEL 70300 C Tenable Network Security...

Tumbleweed SecureTransport vcst_eu.dll ActiveX Control Buffer Overflows

The remote host contains the TumbleWeed SecureTransport ActiveX control, used to perform secure file transfer functions. The version of this control on the remote host is reportedly affected by multiple stack-based buffer overflows. If an attacker can trick a user on the affected host into visiti...

Microsoft Reissues MS13-066 Windows Server Patch

Microsoft has re-released one of the August security patches for Windows Server 2008 in order to fix a regression issue that would cause some servers to stop working. The MS13-066 patch was released again Monday after Microsoft discovered the problem last week. The patch in the MS13-066 update...

Microsoft Remote Desktop Protocol Security Advisory (2861855)

This host is missing an important security update according to Microsoft advisory 2861855. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2013-3175

CVE-2013-3175 is a Windows elevation-of-privilege issue in the handling of asynchronous RPC requests. Affected products include Windows XP SP2/SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT. Root cause...

MS KB2862966: Updates to Improve Cryptography and Digital Certificate Handling in Windows

The remote host is missing Microsoft KB2862966, an update that improves cryptography and digital certificate handling in Windows. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid69332; scriptversion"1.6"; scriptcvsdate"Date: 2018/11/15 20:50:28"; scriptxrefname:"MSKB"...

Microsoft Windows NAT Driver Denial of Service Vulnerability (2849568)

This host is missing an important security update according to Microsoft Bulletin MS13-062. OpenVAS Vulnerability Test $Id: secpodms13-062.nasl 5346 2017-02-19 08:43:11Z cfi $ Microsoft Windows NAT Driver Denial of Service Vulnerability 2849568 Authors: Thanga Prakash S Copyright: Copyright c 201...

MS13-062: Vulnerability in Remote Procedure Call Could Allow Elevation of Privilege (2849470)

The remote host contains a flaw in the way that Windows handles asynchronous RPC requests, which can lead to elevation of privileges. An attacker could exploit this issue to run arbitrary code and take complete control of an affected system. C Tenable Network Security, Inc. include"compat.inc"; i...

Microsoft Windows ICMPv6 Packet Denial of Service Vulnerability (2868623)

This host is missing a important security update according to Microsoft Bulletin MS13-065. OpenVAS Vulnerability Test $Id: secpodms13-065.nasl 5346 2017-02-19 08:43:11Z cfi $ Microsoft Windows ICMPv6 Packet Denial of Service Vulnerability 2868623 Authors: Thanga Prakash S Copyright: Copyright c...

Microsoft Active Directory Federation Services Information Disclosure Vulnerability (2873872)

This host is missing an important security update according to Microsoft Bulletin MS13-066. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

PT-2013-4207 · Microsoft · Windows Server 2012 +6

Name of the Vulnerable Software and Affected Versions: Microsoft Windows Vista SP2 Microsoft Windows Server 2008 SP2 and R2 SP1 Microsoft Windows 7 SP1 Microsoft Windows 8 Microsoft Windows Server 2012 Microsoft Windows RT Description: A denial of service issue exists due to improper memory...

Microsoft Windows NAT Driver Denial of Service Vulnerability (2849568)

This host is missing an important security update according to Microsoft Bulletin MS13-062. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows Kernel Privilege Elevation Vulnerabilities (2859537)

This host is missing an important security update according to Microsoft Bulletin MS13-063. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS KB2861855: Updates to Improve Remote Desktop Protocol Network-Level Authentication

The remote host is missing Microsoft KB2861855. This update provides defense-in-depth measures for Remote Desktop Protocol Network Level Authentication. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid69333; scriptversion"1.5"; scriptcvsdate"Date: 2018/11/15 20:50:28"...

Microsoft Windows Kernel CVE-2013-3198 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to execute arbitrary code with kernel-level privileges. Successful exploits will result in the complete compromise of affected computers. Failed exploit attempts may cause...

MS13-066: Vulnerability in Active Directory Federation Services could allow information disclosure: August 13, 2013

Resolves a vulnerability in Active Directory Federation Services AD FS that could reveal information that relates to the service account that is used by AD FS.INTRODUCTIONMicrosoft has released security bulletin MS13-066. To view the complete security bulletin, go to the following Microsoft...

Microsoft Windows Kernel CVE-2013-3196 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to execute arbitrary code with kernel-level privileges. Successful exploits will result in the complete compromise of affected computers. Failed exploit attempts may cause...

Design/Logic Flaw

Multiple untrusted search path vulnerabilities in updater.exe in Mozilla Updater in Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, and Thunderbird ESR 17.x before 17.0.8 on Windows 7, Windows Server 2008 R2, Windows 8, and Windows Server 2012 allow local...

CVE-2013-1712

CVE-2013-1712 affects Mozilla updater in Firefox (before 23.0) and Firefox ESR 17.x (before 17.0.8), as well as Thunderbird (before 17.0.8 and ESR 17.x before 17.0.8) on Windows 7/Server 2008 R2/8/Server 2012. The issue is a local privilege escalation via untrusted search path Trojan horse DLLs l...