Protected Web Page Detection

The remote web server requires HTTP authentication for the following pages. Several authentication schemes are available : - Basic is the simplest, but the credentials are sent in cleartext. - NTLM provides an SSO in a Microsoft environment, but it cannot be used on both the proxy and the web...

Design/Logic Flaw

The Telnet service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote Telnet servers to execute arbitrary code on a client machine by replaying the NTLM credentials of a client user, aka "Telnet Credential Reflectio...

CVE-2009-1930

The Telnet service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote Telnet servers to execute arbitrary code on a client machine by replaying the NTLM credentials of a client user, aka "Telnet Credential Reflectio...

CVE-2009-1930: Undefined Security Weakness

The Telnet service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote Telnet servers to execute arbitrary code on a client machine by replaying the NTLM credentials of a client user, aka "Telnet Credential Reflectio...

Telnet NTLM Credential Reflection Authentication Bypass Vulnerability (960859)

This host is missing a critical security update according to Microsoft Bulletin MS09-042. OpenVAS Vulnerability Test $Id: secpodms09-042.nasl 5363 2017-02-20 13:07:22Z cfi $ Telnet NTLM Credential Reflection Authentication Bypass Vulnerability 960859 Authors: Nikita MR Updated By: Madhuri D on...

Telnet NTLM Credential Reflection Authentication Bypass Vulnerability (960859)

This host is missing a critical security update according to Microsoft Bulletin MS09-042. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows Telnet NTLM凭据反射绕过认证漏洞（MS09-042）

BUGTRAQ ID: 35993 CVECAN ID: CVE-2009-1930 Microsoft Windows是微软发布的非常流行的操作系统。 Telnet协议未正确地选择加入NTLM凭据反射保护以确保用户凭据不被反射回来并供用户使用。如果用户受骗连接到了恶意的Telnet服务器，就可能导致反射NTLM凭据并以当前用户的权限获得系统访问。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Vista SP2 Microsoft Windows Vista SP1 Microsoft Windo...

Microsoft Telnet Services Credential Reflection Code Execution (MS09-042; CVE-2009-1930)

Telnet is a bidirectional communications protocol that allows for command line remote administration over the TCP protocol. A remote code execution vulnerability has been reported in the way Microsoft Windows Telnet Service handles NTLM credentials. The vulnerability is due to an error in the...

Microsoft telnet NTLM relaying

NTLM relaying attack against telnet client authentication is possible...

[SECURITY] [DSA 1813-2] New evolution-data-server packages fix regression

------------------------------------------------------------------------ Debian Security Advisory DSA-1813-2 [email protected] http://www.debian.org/security/ Steffen Joeris July 22, 2009 http://www.debian.org/security/faq -...

openSUSE Security Update : evolution-data-server (evolution-data-server-782)

camel's NTLM SASL authentication mechanism as used by evolution did not properly validate server's challenge packets CVE-2009-0582. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

openSUSE Security Update : evolution (evolution-776)

camel's NTLM SASL authentication mechanism as used by evolution did not properly validate server's challenge packets CVE-2009-0582. This update also includes the following non-security fixes : - Fixes a critical crasher in mailer component. - Fixes creation of recurrence monthly items in GroupWis...

Stable, Beta update: Security fix

Google Chrome 2.0.172.33 has been released to the Stable and Beta channels. This release fixes a critical security issue and two other networking bugs. CVE-2009-2121: Buffer overflow processing HTTP responses Google Chrome is vulnerable to a buffer overflow in handling certain responses from HTTP...

Debian Security Advisory DSA 1813-1 (evolution-data-server)

The remote host is missing an update to evolution-data-server announced via advisory DSA 1813-1. OpenVAS Vulnerability Test $Id: deb18131.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1813-1 evolution-data-server Authors: Thomas Reinke Copyright: Copyrigh...

Debian DSA-1813-1 : evolution-data-server - Several vulnerabilities

Several vulnerabilities have been found in evolution-data-server, the database backend server for the evolution groupware suite. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-0587 It was discovered that evolution-data-server is prone to integer...

[SECURITY] [DSA 1813-1] New evolution-data-server packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1813-1 [email protected] http://www.debian.org/security/ Steffen Joeris June 08, 2009 http://www.debian.org/security/faq -...

DSA-1813-1 evolution-data-server - several vulnerabilities

Bulletin has no description...

CentOS 4 : evolution / evolution-data-server (CESA-2009:0355)

Updated evolution and evolution-data-server packages that fixes multiple security issues are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Evolution is the integrated collection of e-mail,...

CentOS 4 : evolution-data-server (CESA-2009:0354)

Updated evolution-data-server and evolution28-evolution-data-server packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Evolution Data Server provide...

Windows SMB credential reflection vulnerability

Added: 05/07/2009 CVE: CVE-2008-4037 BID: 7385 OSVDB: 49736 Background The Server Message Block SMB.aspx protocol is a file sharing protocol implemented in Microsoft Windows. NTLM is a challenge/response-based authentication protocol. Problem An NTLM credential reflection vulnerability allows a...