Microsoft Windows: Event Log behavior when log file reaches its max size (App)

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winappretention.nasl 10989 2018-08-15 14:57:51Z emoss $ Check value for Control Event Log behavior when the log file reaches its maximum size Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

Microsoft Windows: Event Log behavior when log file reaches its max size (System)

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winsystemretention.nasl 10989 2018-08-15 14:57:51Z emoss $ Check value for System: Control Event Log behavior when the log file reaches its maximum size Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks Gmb...

Microsoft Windows: Specify the maximum log file size (Setup)

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winsetupmaxlogsize.nasl 11363 2018-09-12 13:46:05Z emoss $ Check value for Specify the maximum log file size Setup Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This progr...

Microsoft Windows: Event Log behavior when log file reaches its max size (Setup)

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winsetupretention.nasl 10989 2018-08-15 14:57:51Z emoss $ Check value for Setup: Control Event Log behavior when the log file reaches its maximum size Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

Microsoft Windows: Specify the maximum log file size (Security)

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winsecuritymaxlogsize.nasl 11363 2018-09-12 13:46:05Z emoss $ Check value for Specify the maximum log file size Security Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This...

Microsoft Windows: Specify the maximum log file size (System)

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winsystemmaxlogsize.nasl 11363 2018-09-12 13:46:05Z emoss $ Check value for Specify the maximum log file size System Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This...

Microsoft Windows: Event Log behavior when log file reaches its max size (Security)

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winsecurityretention.nasl 10989 2018-08-15 14:57:51Z emoss $ Check value for Control Event Log behavior when the log file reaches its maximum size Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

Microsoft Windows: MSS: Percentage threshold for security event log (show warning)

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winmlwarninglevel.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for MSS: WarningLevel Percentage threshold for the security event log at which the system will generate a warning Authors: Emanuel Moss Copyright: Copyrigh...

Microsoft Windows: Service: Windows Event Collector

This test checks the setting for policy OpenVAS Vulnerability Test $Id: wineventcollector.nasl 11344 2018-09-12 06:57:52Z emoss $ Check value for Windows Event Collector Wecsvc Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

Citrix Licensing service is not running or properly installed on the License server

The Citrix Licensing service is not running, properly installed, registered on the machine, or the service permissions are not set correctly. The System Event Log may have traces of service-related issues...

DCSYNCMonitor - Monitors For DCSYNC And DCSHADOW Attacks And Create Custom Windows Events For These Events

This tool is an application/service that can be deployed on Domain controllers to alert on Domain Controller Syncronization attempts. When an attempt is detected, the tool will write an event to the Windows Event Log. These events can be correlated in a SIEM. In addition, this tool can take a lis...

Debian DSA-4160-1 : libevt - security update

It was discovered that insufficient input sanitising in libevt, a library to access the Windows Event Log EVT format, could result in denial of service if a malformed EVT file is processed. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

Debian: Security Advisory (DSA-4160-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Libevt Design Vulnerabilities

libevt is a tool for accessing the Windows event log. A security vulnerability in the 'libevtrecordvaluesreadevent' function in the libevtrecordvalues.c file in versions of libevt prior to 2018-03-17 stems from a failure of the program to properly perform a detection. A detailed vulnerability...

Invoke-Phant0m - Windows Event Log Killer

This script walks thread stacks of Event Log Service process spesific svchost.exe and identify Event Log Threads to kill Event Log Service Threads. So the system will not be able to collect logs and at the same time the Event Log Service will appear to be running. I have made this script for two...

Catalyst Mahara Information Disclosure Vulnerability

Catalyst Mahara is a social networking system from Catalyst IT in New Zealand. The system includes a blog, resume builder, file manager, and more. A security vulnerability exists in Catalyst Mahara that stems from the program storing passwords in plaintext in the eventlog form. An attacker could...

Vulnerabilities include the browser of the event log, settings of distributed switches, and the content library of the management server for virtual infrastructure VMware vCenter Server, which allows attackers to access confidential information.

The vulnerability of the event log browser, distributed switch configuration settings, and the content library of the VMware vCenter Server management server is related to incorrect restrictions on XML references to external objects. Exploiting this vulnerability can allow a malicious actor to...

Zoho ManageEngine Event Log Analyzer Cross-Site Scripting Vulnerability (CNVD-2017-26267)

Zoho ManageEngine Event Log Analyzer is the United States ZhuoHao Zoho company's set of systems, event log analysis software. A cross-site scripting vulnerability exists in Zoho ManageEngine Event Log Analyzer versions 11.4 and 11.5, which originates from a password being displayed in a cookie wi...

Zoho ManageEngine Event Log Analyzer Cross-Site Scripting Vulnerability

Zoho ManageEngine Event Log Analyzer is the United States ZhuoHao Zoho company's set of systems, event log analysis software. A cross-site scripting vulnerability exists in the Event Log Parser function and the 'Display' function in Zoho ManageEngine Event Log Analyzer version 11.4 and 11.5. A...

CVE-2017-11687

Multiple Persistent cross-site scripting XSS vulnerabilities in Event log parsing and Display functions in Zoho ManageEngine Event Log Analyzer 11.4 and 11.5 allow remote attackers to inject arbitrary web script or HTML via syslog...