599 matches found
CVE-2002-1712
Microsoft Windows 2000 is affected by CVE-2002-1712: a remote attacker can cause a denial of service via memory consumption by flooding the NetBIOS port (TCP/139) with empty TCP/IP packets that have ACK and FIN bits set, as shown by stream3. Impact is described as partial availability. The provid...
CVE-2002-1712
Microsoft Windows 2000 allows remote attackers to cause a denial of service memory consumption by sending a flood of empty TCP/IP packets with the ACK and FIN bits set to the NetBIOS port TCP/139, as demonstrated by stream3...
CVE-2002-1712: Undefined Security Weakness
Microsoft Windows 2000 allows remote attackers to cause a denial of service memory consumption by sending a flood of empty TCP/IP packets with the ACK and FIN bits set to the NetBIOS port TCP/139, as demonstrated by stream3...
Microsoft ISA Server proxy / firewall multiple vulnerabilities
Cache poisoning problem, NetBIOS predefined filter vulnerability...
CVE-2005-1216
CVE-2005-1216 describes an elevation-of-privilege vulnerability in Microsoft ISA Server 2000 involving the NetBIOS (all) predefined packet filter. An attacker could connect to NetBIOS services on a server that has the filter enabled, potentially bypassing content restrictions or accessing restric...
CVE-2005-1216
Microsoft ISA Server 2000 allows remote attackers to connect to services utilizing the NetBIOS protocol via a NetBIOS connection with an ISA Server that uses the NetBIOS all predefined packet filter...
CVE-2005-1216
Microsoft ISA Server 2000 allows remote attackers to connect to services utilizing the NetBIOS protocol via a NetBIOS connection with an ISA Server that uses the NetBIOS all predefined packet filter...
CVE-2005-1216: Undefined Security Weakness
Microsoft ISA Server 2000 allows remote attackers to connect to services utilizing the NetBIOS protocol via a NetBIOS connection with an ISA Server that uses the NetBIOS all predefined packet filter...
Microsoft ISA Server NetBIOS Predefined Filter Policy Bypass Vulnerability
Description Microsoft Internet Security and Acceleration ISA server is prone to a policy bypass vulnerability. Reports indicate that the issue manifests when a Microsoft ISA server is utilizing the 'NetBIOS all' predefined filter. A remote attacker may leverage this vulnerability to successfully...
Microsoft ISA Server 2000 vulnerable to privilege escalation via "NETBIOS" connection
Overview Microsoft Internet Security and Acceleration Server 2000 contains an elevation of privilege vulnerability that allows an attacker to create unintended NetBIOS service connections within the affected ISA Server host. Description Microsoft ISA Server 2000 contains firewall, virtual private...
MS05-017 Microsoft Message Queueing Service Path Overflow
This module exploits a stack buffer overflow in the RPC interface to the Microsoft Message Queueing service. The offset to the return address changes based on the length of the system hostname, so this must be provided via the 'HNAME' option. Much thanks to snort.org and Jean-Baptiste Marchand's...
HP-UX PHNE_26988 : HP-UX Running Advanced Server/9000 for HP-UX (AS/U) RFC-Netbios, Remote Denial of Service (DoS) (HPSBUX00198 SSRT071359 rev.2)
s700800 11.X RFC-NETBIOS cumulative patch Jun2002 : RFC-Netbios panics when it receives a malformed UDP packet on port 139. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHNE26988. The text itself is copyrigh...
MS03-034: NetBIOS Name Service Reply Information Leakage (824105) (credentialed check)
The remote host is running a version of the NetBT name service that suffers from a memory disclosure problem. An attacker could send a special packet to the remote NetBT name service, and the reply will contain random arbitrary data from the remote host memory. This arbitrary data may be a fragme...
[NT] WINS Replication Remote Vulnerability
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...
Debian DSA-065-1 : samba - remote file append/creation
Michal Zalewski discovered that Samba does not properly validate NetBIOS names from remote machines. By itself that is not a problem, except if Samba is configured to write log-files to a file that includes the NetBIOS name of the remote side by using the %m' macro in the log file' command. In th...
Multiple Samba bugs
DoS against NetBIOS name service nmbd, endless loop in SMBD...
CVE-2002-1104
Cisco Virtual Private Network VPN Client software 2.x.x and 3.x before 3.0.5 allows remote attackers to cause a denial of service crash via TCP packets with source and destination ports of 137 NETBIOS...
CVE-2002-1104: Undefined Security Weakness
Cisco Virtual Private Network VPN Client software 2.x.x and 3.x before 3.0.5 allows remote attackers to cause a denial of service crash via TCP packets with source and destination ports of 137 NETBIOS...