Microsoft Windows Server 2003 SP2 - Local Privilege Escalation (MS14-070)

""" KL-001-2015-001 : Microsoft Windows Server 2003 SP2 Arbitrary Write Privilege Escalation Title: Microsoft Windows Server 2003 SP2 Arbitrary Write Privilege Escalation Advisory ID: KL-001-2015-001 Publication Date: 2015.01.28 Publication URL:...

Microsoft Windows Server 2003 SP2 Arbitrary Write Privilege Escalation

KL-001-2015-001 : Microsoft Windows Server 2003 SP2 Arbitrary Write Privilege Escalation Title: Microsoft Windows Server 2003 SP2 Arbitrary Write Privilege Escalation Advisory ID: KL-001-2015-001 Publication Date: 2015.01.28 Publication URL:...

Microsoft Windows Server 2003 SP2 Arbitrary Write Privilege Escalation

Vulnerability Details Affected Vendor: Microsoft Affected Product: TCP/IP Protocol Driver Affected Version: 5.2.3790.4573 Platform: Microsoft Windows Server 2003 Service Pack 2 Architecture: x86, x64, Itanium Impact: Privilege Escalation Attack vector: IOCTL CVE-ID: CVE-2014-4076 2...

F5 Networks BIG-IP : Multiple Wireshark vulnerabilities (K15868)

CVE-2013-4074 The dissectcapwapdata function in epan/dissectors/packet-capwap.c in the CAPWAP dissector in Wireshark 1.6.x before 1.6.16 and 1.8.x before 1.8.8 incorrectly uses a -1 data value to represent an error condition, which allows remote attackers to cause a denial of service application...

Immunity Canvas: MS14_070

Name| ms14070 ---|--- CVE| CVE-2014-4076 Exploit Pack| CANVAS Description| ms14070 Notes| References: https://technet.microsoft.com/en-us/library/security/ms14-070.aspx CVE Name: CVE-2014-4076 VENDOR: Microsoft NOTES: Tested on: - Windows 2003 Standard Edition x86 SP2 English Usage: Win32/MOSDEF$...

CVE-2014-4076

The TCP/IP Protocol Driver in Microsoft Windows Server 2003 Service Pack 2 (x86, x64, and IA-64 architectures) is vulnerable to a local privilege escalation vulnerability. The root cause is the tcpip.sys driver's failure to sufficiently validate memory objects during IOCTL processing . By craftin...

MS14-070 Windows tcpip!SetAddrOptions NULL Pointer Dereference

A vulnerability within the Microsoft TCP/IP protocol driver tcpip.sys can allow a local attacker to trigger a NULL pointer dereference by using a specially crafted IOCTL. This flaw can be abused to elevate privileges to SYSTEM. Module Options msf use exploit/windows/local/ms14/070tcpipioctl msf...

Microsoft Windows TCP/IP IOCTL Processing Elevation of Privilege (MS14-070; CVE-2014-4076)

An elevation of privilege vulnerability exists in the Windows TCP/IP stack. The vulnerability is caused when the Windows TCP/IP stack fails to properly handle objects in memory during IOCTL processing. To exploit this vulnerability, an attacker would first have to log on to the system and run a...

Microsoft Windows TCP/IP CVE-2014-4076 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to execute arbitrary code with elevated privileges. Technologies Affected Microsoft Windows Server 2003 SP2 Microsoft Windows Server 2003 x64 Edition Service Pack 2...

CVE-2012-4076

Cisco NX-OS allows local users to gain privileges and execute arbitrary commands via shell metacharacters in a command that calls the system library function, aka Bug IDs CSCtf23559 and CSCtf27780...

CVE-2012-4076

CVE-2012-4076 affects Cisco NX-OS with a local-privilege escalation via shell metacharacters in a call to the system() library function. The issue arises from improper input handling during command processing (Bug IDs CSCtf23559 and CSCtf27780). Public sources describe that an authenticated, loca...

Fedora Update for wireshark FEDORA-2013-17661

Check for the Version of wireshark OpenVAS Vulnerability Test Fedora Update for wireshark FEDORA-2013-17661 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

SuSE 11.2 / 11.3 Security Update : wireshark (SAT Patch Numbers 8044 / 8045)

This wireshark version update to 1.8.8 includes several security and general bug fixes. Version update to 1.8.8 bnc824900 : - vulnerabilities fixed : - The CAPWAP dissector could crash. wnpa-sec-2013-32. CVE-2013-4074 - The GMR-1 BCCH dissector could crash. wnpa-sec-2013-33. CVE-2013-4075 - The P...

MGASA-2013-0181 Updated wireshark packages fix multiple security vulnerabilities

The CAPWAP dissector could crash CVE-2013-4074. The GMR-1 BCCH dissector could crash CVE-2013-4075. The PPP dissector could crash CVE-2013-4076. The NBAP dissector could crash CVE-2013-4077. The RDP dissector could crash CVE-2013-4078. The GSM CBCH dissector could crash CVE-2013-4079. The Assa...

CVE-2013-4076

Buffer overflow in the dissectiphccrtpfh function in epan/dissectors/packet-ppp.c in the PPP dissector in Wireshark 1.8.x before 1.8.8 allows remote attackers to cause a denial of service application crash via a crafted packet...

CVE-2013-4076

Buffer overflow in the dissectiphccrtpfh function in epan/dissectors/packet-ppp.c in the PPP dissector in Wireshark 1.8.x before 1.8.8 allows remote attackers to cause a denial of service application crash via a crafted packet...

CVE-2013-4076

Wireshark 1.8.x before 1.8.8 has a buffer overflow in the PPP dissector (dissect_iphc_crtp_fh in epan/dissectors/packet-ppp.c) that can be triggered by a crafted packet, causing the application to crash (DoS). The vulnerability affects the PPP dissector in Wireshark 1.8.x era; exploitation would ...

Wireshark Multiple Vulnerabilities (Jun 2013) - Mac OS X

Wireshark is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"; ifdescripti...

Wireshark Multiple Vulnerabilities - June 13 (Windows)

This host is installed with Wireshark and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbwiresharkmultvulnjun13win.nasl 6104 2017-05-11 09:03:48Z teissa $ Wireshark Multiple Vulnerabilities - June 13 Windows Authors: Arun Kallavi Copyright: Copyright c 2013 Greenbone...

Fedora Update for openstack-nova FEDORA-2012-5026

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...