795 matches found
Update for Internet Explorer Administrative Template resources
Describes an update that provides Group Policy Administrative Template .adm resource files for Internet Explorer.About this updateThis update package contains Group Policy Administrative Template resource files inetres.adml for Internet Explorer.Update informationTo get this update, install the...
Microsoft February 2015 Patch Tuesday security bulletins
Microsoft’s first foray into patching Internet Explorer in 2015 is still short one zero day fix. Today’s Patch Tuesday security bulletins included a monster IE rollup taking care of 41 vulnerabilities in the browser, and another bulletin patching a Windows zero day publicly disclosed by Google’s...
MS15-011 & MS15-014: Hardening Group Policy
Today we are releasing MS15-011 & MS15-014 which harden group policy and address network access vulnerabilities that can be used to achieve remote code execution RCE in domain networks. The MS15-014 update addresses an issue in Group Policy update which can be used to disable client-side global S...
MS15-014: Vulnerability in Group Policy Could Allow Security Feature Bypass (3004361)
The version of Windows running on the remote host is affected by a security downgrade vulnerability that affects workstations and servers configured to use Group Policy. A man-in-the-middle attacker, via modified domain controller responses sent to targeted systems, can cause the policy file to...
MS15-011: Vulnerability in Group Policy could allow remote code execution: February 10, 2015
None None...
Microsoft Windows SMB Security Feature Bypass (MS15-014; CVE-2015-0009)
A security feature bypass vulnerability exists in Microsoft Windows. The vulnerability is due to the way Group Policy settings are applied when SMB signing failures occur. An attacker can exploit this vulnerability by a man-in-the-middle attack that modifies domain controller responses to client...
MS15-011: Vulnerability in Group Policy Could Allow Remote Code Execution (3000483)
The remote Windows host is affected by a remote code execution vulnerability due to how the Group Policy service manages policy data when a domain-joined system connects to a domain controller. An attacker, using a controlled network, can exploit this to gain complete control of the host. Note th...
MS15-014: Vulnerability in Group Policy could allow security feature bypass: February 10, 2015
None None...
Microsoft Releases Critical Security Bulletin
Microsoft has released Security Bulletin MS15-011 to address a critical vulnerability in Windows. Exploitation of this vulnerability could allow a remote attacker to take complete control of an affected system. This security update contains a new policy feature UNC Hardened Access which is not...
Microsoft Windows Group Policy CVE-2015-0008 Remote Code Execution Vulnerability
Description Microsoft Windows is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition. Technologies Affected Avaya Aura...
Microsoft security advisory: Update to improve Windows command-line auditing: February 10, 2015
None None...
Group Policy Script Execution From Shared Resource
This is a general-purpose module for exploiting systems with Windows Group Policy configured to load VBS startup/logon scripts from remote locations. This module runs a SMB shared resource that will provide a payload through a VBS file. Startup scripts will be executed with SYSTEM privileges, whi...
Backup Service Will Not Start Due To Group Policy
Challenge The Veeam Backup Service starts and then immediately stops. Svc.VeeamBackup.log contains errors such as: Error Unable to acquire privilege 'SeBackupPrivilege'. Error Unable to acquire privilege 'SeRestorePrivilege'. Cause According to the Required Permissions page of the user guide, the...
IE to Block Older ActiveX Controls, Starting with Java
Next week’s Microsoft Patch Tuesday security bulletins will not only bring nine new security bulletins but also an update to Internet Explorer that blocks outdated ActiveX controls, starting with Java. Notifications will flag the older ActiveX controls and users will have the option to update the...
Microsoft IIS 5.0 .printer ISAPI Extension Buffer Overflow Vulnerability (3)
No description provided by source. source: http://www.securityfocus.com/bid/2674/info Windows 2000 Internet printing ISAPI extension contains msw3prt.dll which handles user requests. Due to an unchecked buffer in msw3prt.dll, a maliciously crafted HTTP .printer request containing approx 420 bytes...
Microsoft IIS 5.0 .printer ISAPI Extension Buffer Overflow Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/2674/info Windows 2000 Internet printing ISAPI extension contains msw3prt.dll which handles user requests. Due to an unchecked buffer in msw3prt.dll, a maliciously crafted HTTP .printer request containing approx 420 bytes...
Microsoft IIS 5.0 .printer ISAPI Extension Buffer Overflow Vulnerability (4)
No description provided by source. source: http://www.securityfocus.com/bid/2674/info Windows 2000 Internet printing ISAPI extension contains msw3prt.dll which handles user requests. Due to an unchecked buffer in msw3prt.dll, a maliciously crafted HTTP .printer request containing approx 420 bytes...
Sophos Disk Encryption vulnerable to authentication bypass
Overview Sophos Disk Encryption contains an authentication bypass vulnerability. Sophos Disk Encryption is a product to encrypt hard disk data on Windows PC. By default, Window requires logon authentication when the PC wakes up from hibernation or sleep mode. When Sophos Disk Encryption is...
JVN#63940326: Sophos Disk Encryption vulnerable to authentication bypass
Sophos Disk Encryption is a product to encrypt hard disk data on Windows PC. By default, Window requires logon authentication when the PC wakes up from hibernation or sleep mode. When Sophos Disk Encryption is installed, no authentication is required before operating the PC. Impact An...
May 2014 Security Bulletin Webcast and Q&A
Today we published the May 2014 Security Bulletin Webcast Questions & Answers page. We answered 17 questions in total, with the majority focusing on the update for SharePoint MS14-022, Group Policy MS14-025 and Internet Explorer MS14-029. Here is the video replay: We invite you to join us for the...