327 matches found
Microsoft Windows LSASS CVE-2019-0972 Remote Denial of Service Vulnerability
Description Microsoft Windows is prone to a remote denial of service vulnerability. An attacker can exploit this issue to cause a denial-of-service condition. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 1607 for x64-based Systems Microso...
Microsoft Windows 10 - SSPI Network Authentication Session 0 Privilege Escalation Exploit
Exploit for windows platform in category local exploits Windows: SSPI Network Authentication Session 0 EoP Platform: Windows 10 1803/1809 not tested earlier versions Class: Elevation of Privilege Security Boundary per Windows Security Service Criteria: Session boundary Summary: Performing an NTLM...
Microsoft Windows 10 - SSPI Network Authentication Session 0 Privilege Escalation
Microsoft Windows 10 - SSPI Network Authentication Session 0 Privilege Escalation Windows: SSPI Network Authentication Session 0 EoP Platform: Windows 10 1803/1809 not tested earlier versions Class: Elevation of Privilege Security Boundary per Windows Security Service Criteria: Session boundary...
Threat Analysis: Recent Attack Technique Leveraging cmd.exe and PowerShell Demonstrates How Attackers Are Using Trusted Microsoft Applications for Malicious Behavior
An attack leveraging cmd.exe and PowerShell was recently investigated by Cb ThreatSight analysts. Our initial investigation discovered that a batch file was executed on the targeted system. This batch file then invoked PowerShell with a base64 encoded command. Decoding the command revealed a seri...
July 24, 2018—KB4338827 (OS Build 15063.1235)
None None...
June 21, 2018—KB4284830 (OS Build 15063.1182)
None None...
Retrieving NTLM Hashes without Touching LSASS: Internal Monologue Attack
Mimikatz, developed by Benjamin Delpy @gentilkiwi, is a well-regarded post-exploitation tool, which allows adversaries to extract plain text passwords, NTLM hashes and Kerberos tickets from memory, as well as perform attacks such as pass-the-hash, pass-the-ticket or build a golden ticket. Arguabl...
January 17, 2018—KB4057401 (Preview of Monthly Rollup)
None None...
October 10, 2017—KB4041691 (OS Build 14393.1770)
None None...
September 19, 2017—KB4038774 (Preview of Monthly Rollup)
None None...
September 12, 2017—KB4038783 (OS Build 10586.1106)
None None...
August 15, 2017—KB4034663 (Preview of Monthly Rollup)
None None...
July 18, 2017—KB4025335 (Preview of Monthly Rollup)
None None...
Second Try at LSASS Patch Addresses Vulnerability
Microsoft’s second try at patching a vulnerability in a critical Windows process apparently is more successful than its first attempt. Yesterday, as part of its monthly Patch Tuesday release of security bulletins, Microsoft sent out an update that fixed a denial-of-service vulnerability in the...
Microsoft Windows LSASS Local Denial of Service Vulnerability (3216771)
This host is missing an important security update according to Microsoft Bulletin MS17-004. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
CVE-2017-0004
The Local Security Authority Subsystem Service LSASS in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to cause a denial of service reboot via a crafted authentication request, aka "Local Security Authority Subsystem Service Denial of...
CVE-2017-0004
The CVE-2017-0004 entry describes a remote Denial of Service affecting the Local Security Authority Subsystem Service (LSASS) on Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1. A crafted authentication request can trigger an LSASS reboot, effectively taking the target sy...
CVE-2017-0004
The Local Security Authority Subsystem Service LSASS in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to cause a denial of service reboot via a crafted authentication request, aka "Local Security Authority Subsystem Service Denial of...
Microsoft Issues Record Low Number of Patch Tuesday Bulletins
Microsoft’s first Patch Tuesday update of 2017 is one of the smallest in the history of the program with four bulletins released today, including three rated important along with Adobe’s monthly Flash Player update for Internet Explorer and Edge, which was rated critical by the vendor. The...
Local Security Authority Subsystem Service Denial of Service Vulnerability
This security update corrects a denial of service in the Local Security Authority Subsystem Service LSASS caused when an unauthenticated attacker sends a specially crafted authentication request. A remote attacker who successfully exploited this vulnerability could cause a denial of service on th...