SUSE: Security Advisory (SUSE-SU-2020:2721-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2020:2719-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Exploit for CVE-2020-1472

Zerologon...

The vulnerability of the NETLOGON service in the Samba networking software package, due to security flaws, allows attackers to access confidential data and compromise its integrity.

The vulnerability of the NETLOGON service in the Samba networking software package is related to security flaws. Exploiting this vulnerability can allow an attacker to gain access to confidential data and compromise its integrity...

EulerOS Virtualization 2.9.0 : samba (EulerOS-SA-2021-1635)

According to the versions of the samba packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in samba's DNS server. An authenticated user could use this flaw to the RPC server to crash. This RPC server, whi...

NewStart CGSL CORE 5.04 / MAIN 5.04 : samba Multiple Vulnerabilities (NS-SA-2021-0024)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has samba packages installed that are affected by multiple vulnerabilities: - All samba versions 4.9.x before 4.9.18, 4.10.x before 4.10.12 and 4.11.x before 4.11.5 have an issue where if it is set with log level = 3 or above...

Huawei EulerOS: Security Advisory for samba (EulerOS-SA-2021-1517)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 3.0.6.6 : samba (EulerOS-SA-2021-1517)

According to the versions of the samba packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in samba's DNS server. An authenticated user could use this flaw to the RPC server to crash. This RPC server, whi...

EulerOS Virtualization for ARM 64 3.0.6.0 : samba (EulerOS-SA-2021-1533)

According to the versions of the samba packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - An elevation of privilege vulnerability exists when an attacker establishes a vulnerable Netlogon secure channel...

Microsoft Launches Phase 2 Mitigation for Netlogon Remote Code Execution Vulnerability (CVE-2020-1472)

Microsoft addressed a critical remote code execution vulnerability affecting the Netlogon protocol CVE-2020-1472 on August 11, 2020. Beginning with the February 9, 2021 Security Update release, Domain Controllers will be placed in enforcement mode. This will require all Windows and non-Windows...

February 9, 2021—KB4601319 (OS Builds 19041.804 and 19042.804)

February 9, 2021—KB4601319 OS Builds 19041.804 and 19042.804 EXPIRATION NOTICEIMPORTAN T As of 9/12/2023, this KB is only available from Windows Update. It is no longer available from the Microsoft Update Catalog or other release channels. We recommend that you update your devices to the latest...

February 9, 2021—KB4601349 (Security-only update)

February 9, 2021—KB4601349 Security-only update IMPORTANT Windows 8.1 and Windows Server 2012 R2 have reached the end of mainstream support and are now in extended support. Starting in July 2020, there will no longer be optional, non-security releases known as "C" releases for this operating...

February 9, 2021—KB4601348 (Monthly Rollup)

February 9, 2021—KB4601348 Monthly Rollup IMPORTANT Adobe Flash Player went out of support on December 31, 2020. For more information, see Adobe Flash end of support on December 31, 2020. Flash content will be blocked from running in Flash Player beginning January 12, 2021. For more information,...

February 9, 2021—KB4601347 (Monthly Rollup)

February 9, 2021—KB4601347 Monthly Rollup IMPORTANT Verify that you have installed the required updates listed in the How to get this update section before installing this update. Customers who have purchased the Extended Security Update ESU for on-premises versions of this OS must follow the...

February 9, 2021—KB4601363 (Security-only update)

February 9, 2021—KB4601363 Security-only update IMPORTANT Verify that you have installed the required updates listed in the How to get this update section before installing this update.Customers who have purchased the Extended Security Update ESU for on-premises versions of this OS must follow th...

February 9, 2021 - KB4601384 (Monthly Rollup)

February 9, 2021 - KB4601384 Monthly Rollup IMPORTANT Windows 8.1 and Windows Server 2012 R2 have reached the end of mainstream support and are now in extended support. Starting in July 2020, there will no longer be optional, non-security releases known as "C" releases for this operating system...

KB4601363: Windows 7 and Windows Server 2008 R2 February 2021 Security Update

The remote Windows host is missing security update 4601363 or cumulative update 4601347. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when an attacker establishes a vulnerable Netlogon secure channel connection to a domain controller,...

Exploit for CVE-2020-1472

CVE-2020-1472 aka Zerologon Exploit POC !cve-2020-1742https...

EulerOS 2.0 SP3 : samba (EulerOS-SA-2021-1118)

According to the versions of the samba packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in samba's DNS server. An authenticated user could use this flaw to the RPC server to crash. This RPC server, which also serves...

The story of ZeroLogon

This is the story of a vulnerability that was brought about by the incorrect use of an encryption technique. After it was discovered by researchers, the vulnerability was patched and that should have been the end of the story. Unfortunately the patch caused problems of its own, which made it very...