CVE-2016-0050

Network Policy Server NPS in Microsoft Windows Server 2008 SP2 and R2 SP1 and Server 2012 Gold and R2 misparses username queries, which allows remote attackers to cause a denial of service RADIUS authentication outage via crafted requests, aka "Network Policy Server RADIUS Implementation Denial o...

CVE-2016-0050

CVE-2016-0050 denotes a DoS in Microsoft Network Policy Server (NPS) caused by misparsing/ improper handling of RADIUS username strings in authentication requests. A remote, unauthenticated attacker can exploit crafted username inputs to trigger a denial-of-service condition on NPS, affecting Win...

Microsoft Windows NPS RADIUS Server Denial of Service Vulnerability (3133043)

This host is missing an important security update according to Microsoft Bulletin MS16-021 SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS16-021: Security update for NPS RADIUS server to address denial of service: February 9, 2016

None None...

Cumulative update for Windows 10 Version 1511: February 9, 2016

None None...

Cumulative update for Windows 10: February 9, 2016

None None...

Denial of service

Microsoft Windows Server 2003 SP2, Server 2008 SP2 and R2 SP1, and Server 2012 Gold and R2 allow remote attackers to cause a denial of service system hang and RADIUS outage via crafted username strings to 1 Internet Authentication Service IAS or 2 Network Policy Server NPS, aka "Network Policy...

CVE-2015-0015

Microsoft Windows Server 2003 SP2, Server 2008 SP2 and R2 SP1, and Server 2012 Gold and R2 allow remote attackers to cause a denial of service system hang and RADIUS outage via crafted username strings to 1 Internet Authentication Service IAS or 2 Network Policy Server NPS, aka "Network Policy...

Microsoft Network Policy Server RADIUS Denial of Service (MS15-007; CVE-2015-0015)

A denial of service vulnerability exists in the Network Policy Server NPS. The vulnerability is due to the way the NPS handles username strings. A remote attacker can exploit this issue by sending a specially crafted username string to the NPS...

Xxe

nps/servlet/webacc in iManager in the Administration Console server in NetIQ Access Manager NAM 4.x before 4.0.1 HF3 allows remote authenticated novlwww users to read arbitrary files via a query parameter containing an XML external entity declaration in conjunction with an entity reference, relat...

CVE-2014-9412

Multiple cross-site scripting XSS vulnerabilities in NetIQ Access Manager NAM 4.x before 4.1 allow remote attackers to inject arbitrary web script or HTML via 1 an arbitrary parameter to roma/jsp/debug/debug.jsp or 2 an arbitrary parameter in a debug.DumpAll action to nps/servlet/webacc, a...

Unfixed XSS vulnerability at www.npsinternational.com

Security researcher VirtualSystEm, has submitted on 21/01/2011 a cross-site-scripting XSS vulnerability affecting www.npsinternational.com, which at the time of submission ranked 14248316 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...

CVE-2010-1930

Novell iManager

[security bulletin] HPSBGN02441 SSRT090082 rev.1 - HP ProCurve Identity Driven Manager (IDM) Running on Microsoft IAS or NPS, Local Unauthorized Access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01798159 Version: 1 HPSBGN02441 SSRT090082 rev.1 - HP ProCurve Identity Driven Manager IDM Running on Microsoft IAS or NPS, Local Unauthorized Access NOTICE: The information in this Security...