The Windows Local Security authentication subsystem service LSASS remote memory corruption vulnerability MS16-137）

In an attacker to send a carefully camouflaged application, the local security authentication subsystem service LSASS memory damage caused by a denial of service vulnerability A vulnerability in the Windows Local Security Authority Subsystem Service LSASS was found on Windows OS versions ranging...

Microsoft Windows - LSASS SMB NTLM Exchange Null-Pointer Dereference (MS16-137)

Microsoft Windows - LSASS SMB NTLM Exchange Null-Pointer Dereference MS16-137 MS16-137: LSASS Remote Memory Corruption Advisory Title: LSASS SMB NTLM Exchange Remote Memory Corruption Version: 1.0 Issue type: Null Pointer Dereference Authentication: Pre-Authenticated Affected vendor: Microsoft...

Microsoft Windows - LSASS SMB NTLM Exchange Null-Pointer Dereference (MS16-137)

MS16-137: LSASS Remote Memory Corruption Advisory Title: LSASS SMB NTLM Exchange Remote Memory Corruption Version: 1.0 Issue type: Null Pointer Dereference Authentication: Pre-Authenticated Affected vendor: Microsoft Release date: 8/11/2016 Discovered by: Laurent Gaffié Advisory by: Laurent Gaffi...

Local Security Authority Subsystem Service Denial of Service Vulnerability

A denial of service vulnerability exists in the Windows Local Security Authority Subsystem Service LSASS. A remote, but authenticated, attacker who successfully exploited this vulnerability could cause the target system to become nonresponsive. To exploit the vulnerability, a remote attacker woul...

Microsoft SChannel TLSv1 Denial of Service (MS10-085) - Ver2 (CVE-2010-3229)

The Secure Channel SChannel security package is a Security Support Provider SSP that implements the Secure Sockets Layer SSL and Transport Layer Security TLS Internet standard authentication protocols. SChannel is part of the security package that helps provide an authentication service to provid...

Novell NetWare LSASS CIFS.NLM Driver Stack 缓冲区溢出漏洞

No description provided by source...

Microsoft ASN.1 Library Bitstring Heap Overflow

No description provided by source. $Id: ms04007killbill.rb 9929 2010-07-25 21:37:54Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...

Microsoft LSASS Service DsRolerUpgradeDownlevelServer Overflow

No description provided by source. $Id: ms04011lsass.rb 9669 2010-07-03 03:13:45Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Microsoft LSASS Authentication Process Integer Overflow (MS09-059; CVE-2009-2524) - high confidence

An elevation of privilege vulnerability has been discovered in the Microsoft Windows Local Security Authority Subsystem Service LSASS. The vulnerability is due to the Windows NTLM implementation in LSASS improper handling of malformed packets during NTLM authentication. A remote attacker could...

USN-1171-1: Likewise Open vulnerability

It was discovered that an SQL injection vulnerability exists in the Likewise Security Authority lsass local authentication provider. A local attacker could use this to gain elevated privileges...

Microsoft Windows LSASS Length Validation Privilege Escalation (MS11-014; CVE-2011-0039)

The Local Security Authority Subsystem Service LSASS provides an interface for managing local security, domain authentication, and Active Directory service processes. It handles authentication for the client and for the server. An elevation of privilege vulnerability has been reported in the way...

CVE-2011-0039

The Local Security Authority Subsystem Service LSASS in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly process authentication requests, which allows local users to gain privileges via a request with a crafted length, aka "LSASS Length Validation Vulnerability."...

CVE-2011-0039

The CVE-2011-0039 entry describes an elevation-of-privilege flaw in the Local Security Authority Subsystem Service (LSASS) on Windows XP SP2/SP3 and Windows Server 2003 SP2. The issue arises when LSASS processes specially crafted authentication requests with a manipulated length, enabling local u...

Microsoft Windows LSASS Privilege Escalation Vulnerability (2478960)

This host is missing a critical security update according to Microsoft Bulletin MS11-014. OpenVAS Vulnerability Test $Id: secpodms11-014.nasl 5362 2017-02-20 12:46:39Z cfi $ Microsoft Windows LSASS Privilege Escalation Vulnerability 2478960 Authors: Antu Sanadi Copyright: Copyright c 2011 SecPod,...

Microsoft Windows LSASS Privilege Escalation Vulnerability (2478960)

This host is missing a critical security update according to Microsoft Bulletin MS11-014. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows LSASS Length Validation Local Privilege Escalation Vulnerability

Description Microsoft Windows LSASS is prone to a local privilege-escalation vulnerability. An attacker can exploit this issue to execute arbitrary code with SYSTEM-level privileges. Successful exploits will result in the complete compromise of affected computers. Failed exploit attempts may caus...

Microsoft Windows SChannel Denial of Service Vulnerability (2207566)

This host is missing a critical security update according to Microsoft Bulletin MS10-085. OpenVAS Vulnerability Test $Id: secpodms10-085.nasl 5361 2017-02-20 11:57:13Z cfi $ Microsoft Windows SChannel Denial of Service Vulnerability 2207566 Authors: Sooraj KS Copyright: Copyright c 2010 SecPod,...

Microsoft Windows SChannel Denial of Service Vulnerability (2207566)

This host is missing a critical security update according to Microsoft Bulletin MS10-085. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS10-085: Vulnerability in SChannel Could Allow Denial of Service (2207566)

The remote Windows host is running a version of the Secure Channel SChannel security package that is affected by a denial of service vulnerability. This flaw exists in the way that SChannel processes client certificates. A remote attacker could send a specially crafted network packet to the host...

Microsoft SChannel TLSv1 Denial of Service (MS10-085; CVE-2010-3229)

The Secure Channel SChannel security package is a Security Support Provider SSP that implements the Secure Sockets Layer SSL and Transport Layer Security TLS Internet standard authentication protocols. SChannel is part of the security package that helps provide an authentication service to provid...