SolarWinds Orion Platform Unauthenticated RCE (CVE-2021-25274)

The Collector Service in SolarWinds Orion Platform before 2020.2.4 uses MSMQ Microsoft Message Queue and doesn't set permissions on its private queues. As a result, remote unauthenticated clients can send messages to TCP port 1801 that the Collector Service will process. Additionally, upon...

CVE-2021-25274

The Collector Service in SolarWinds Orion Platform before 2020.2.4 uses MSMQ Microsoft Message Queue and doesn't set permissions on its private queues. As a result, remote unauthenticated clients can send messages to TCP port 1801 that the Collector Service will process. Additionally, upon...

CVE-2021-25274

CVE-2021-25274 affects SolarWinds Orion Platform up to version 2020.2.4, specifically the Collector Service. The vulnerability arises because MSMQ private queues are not permissioned, allowing remote unauthenticated actors to send messages to TCP port 1801 that the Collector Service processes, co...

SolarWinds Orion Bug Allows Easy Remote-Code Execution and Takeover

Three serious vulnerabilities have been found in SolarWinds products: Two in the Orion User Device Tracker and one in the Serv-U FTP for Windows product. The most severe of these could allow trivial remote code execution with high privileges. The SolarWinds Orion platform is the network managemen...

October 10, 2017—KB4042895 (OS Build 10240.17643)

None None...

October 10, 2017—KB4041676 (OS Build 15063.674)

None None...

October 10, 2017—KB4041689 (OS Build 10586.1176)

None None...

Microsoft Windows Multiple Vulnerabilities (KB4041689)

This host is missing a critical security update according to Microsoft KB4041689 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Multiple Vulnerabilities (KB4042895)

This host is missing a critical security update according to Microsoft KB4042895 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MS15-133: Security Update for Windows PGM to Address Elevation of Privilege (3116130)

The remote Windows host is missing a security update. It is, therefore, affected by an elevation of privilege vulnerability in the Pragmatic General Multicast PGM protocol, installed with the MSMQ service, due to a race condition that can result in references being made to already freed memory. A...

MS14-062: Vulnerability in Message Queuing Service Could Allow Elevation of Privilege (2993254)

The remote Windows host is affected by a privilege escalation vulnerability in the Microsoft Message Queuing MSMQ service. The vulnerability can be exploited if an attacker sends a specially crafted input/output control IOCTL request to the Message Queuing service. Successful exploitation of this...

Microsoft Message Queuing (MSMQ) RCE Vulnerability (951071) - Active Check

This host is missing important security update according to Microsoft Bulletin MS08-065. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows Message Queuing Privilege Escalation Vulnerability (971032)

This host is missing a critical security update according to Microsoft Bulletin MS09-040. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2009-1922

The Message Queuing aka MSMQ service for Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP2, and Vista Gold does not properly validate unspecified IOCTL request data from user mode before passing this data to kernel mode, which allows local users to gain privileges via a crafted request, aka "MS...

CVE-2009-1922

The CVE-2009-1922 entry concerns Microsoft Windows Message Queuing (MSMQ) Privilege Escalation affecting Windows 2000 SP4, XP SP2, Server 2003 SP2, and Vista. The root cause is improper validation of IOCTL request data in the MSMQ IOCTL handler (mqac.sys) as data moves from user mode to kernel mo...

Microsoft Windows MSMQ (message queuing) privilege escalation

DoS conditions in the service lead to named channel spoofing possibility...

[PT-2008-09] Microsoft Windows MSMQ Privilege Escalation Vulnerability

---------------------------------------------------------------------- PT-2008-09 Positive Technologies Security Advisory Microsoft Windows MSMQ Privilege Escalation Vulnerability ---------------------------------------------------------------------- --- Affected Software Microsoft Windows 2000...

Message Queuing Remote Code Execution Vulnerability (951071)

This host is missing important security update according to Microsoft Bulletin MS08-065. OpenVAS Vulnerability Test $Id: secpodms08-065900224.nasl 5344 2017-02-18 17:43:17Z cfi $ Description: Message Queuing Remote Code Execution Vulnerability 951071 Authors: Veerendra GG Copyright: Copyright C...

CVE-2008-3479

CVE-2008-3479 is a remote code execution vulnerability in the Microsoft Message Queuing (MSMQ) service (mqsvc.exe) on Windows 2000 SP4 . The issue stems from a heap-based overflow caused by improper processing/parsing of an RPC request to MSMQ, allowing an unauthenticated, network-based attacker ...

Microsoft Security Bulletin MS08-065 – Important Vulnerability in Message Queuing Could Allow Remote Code Execution (951071)

Microsoft Security Bulletin MS08-065 – Important Vulnerability in Message Queuing Could Allow Remote Code Execution 951071 Published: October 14, 2008 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability in the Message Queuing Service...