PT-2013-2079 · Microsoft · Windows Server 2008 R2 +8

Name of the Vulnerable Software and Affected Versions: Microsoft Windows Vista SP2 Microsoft Windows Server 2008 SP2 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2008 R2 SP1 Microsoft Windows 7 Gold Microsoft Windows 7 SP1 Microsoft Windows 8 Microsoft Windows Server 2012 Microsoft...

PT-2013-3040

Name of the Vulnerable Software and Affected Versions Microsoft Windows Server 2008 R2 and R2 SP1 Microsoft Windows Server 2012 Description The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and system reboot. This occurs when an attacker...

CVE-2013-1281: Undefined Security Weakness

The NFS server in Microsoft Windows Server 2008 R2 and R2 SP1 and Server 2012 allows remote attackers to cause a denial of service NULL pointer dereference and reboot via an attempted renaming of a file or folder located on a read-only share, aka "NULL Dereference Vulnerability."...

Microsoft Windows TCP/IP Denial of Service Vulnerability (2790655)

This host is missing an important security update according to Microsoft Bulletin MS13-018. OpenVAS Vulnerability Test $Id: secpodms13-018.nasl 5346 2017-02-19 08:43:11Z cfi $ Microsoft Windows TCP/IP Denial of Service Vulnerability 2790655 Authors: Antu Sanadi Copyright: Copyright c 2013 SecPod,...

PT-2013-2080

Name of the Vulnerable Software and Affected Versions Microsoft Windows Server 2008 R2 and R2 SP1 Microsoft Windows 7 Gold and SP1 Description The issue arises from the improper handling of objects in memory by the Client/Server Run-time Subsystem CSRSS in Microsoft Windows. This allows local use...

CVE-2013-0076: Undefined Security Weakness

The Client/Server Run-time Subsystem CSRSS in Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 does not properly handle objects in memory, which allows local users to gain privileges via a crafted application, aka "Reference Count Vulnerability."...

MS13-014: Vulnerability in NFS server could allow denial of service: February 12, 2013

None None...

Microsoft Windows CSRSS CVE-2013-0076 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to execute arbitrary code with SYSTEM-level privileges. Successfully exploiting this issue will result in the complete compromise of affected computers. Technologies...

Microsoft Windows NFS Server NULL Pointer Dereference Remote Denial of Service Vulnerability

Description Microsoft Windows is prone to a remote denial-of-service vulnerability that affects its NFS server. Successful exploits will allow attackers to cause the affected computer to stop responding and reboot, denying service to legitimate users. Technologies Affected Avaya Aura Conferencing...

Microsoft Windows Deployment Services Unattend Retrieval

This module retrieves the client unattend file from Windows Deployment Services RPC service and parses out the stored credentials. Tested against Windows 2008 R2 x64 and Windows 2003 x86. This module requires Metasploit: https://metasploit.com/download Current source:...

CVE-2013-0011

The CVE-2013-0011 issue affects the Windows Print Spooler service and allows remote code execution or memory corruption via a specially crafted print job. Documented targets include Windows 7 (Gold/SP1) and Windows Server 2008 R2 (RTM/SP1), where the Print Spooler components (notably Win32spl.dll...

Microsoft Windows Print Spooler Remote Code Execution Vulnerability (2769369)

This host is missing a critical security update according to Microsoft Bulletin MS13-001. OpenVAS Vulnerability Test $Id: secpodms13-001.nasl 5346 2017-02-19 08:43:11Z cfi $ Microsoft Windows Print Spooler Remote Code Execution Vulnerability 2769369 Authors: Veerendra G.G Copyright: Copyright c...

CVE-2013-0011: Improper Restriction of Operations within the Bounds of a Memory Buffer

The Print Spooler in Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted print job, aka "Windows Print Spooler Components Vulnerability."...

PT-2013-2062

Name of the Vulnerable Software and Affected Versions Microsoft Windows Server 2008 R2 and R2 SP1 Microsoft Windows 7 Gold and SP1 Description A remote code execution issue exists in the way that Microsoft Windows Print Spooler handles specially crafted print jobs, potentially allowing attackers ...

Microsoft Windows Security Feature Bypass Vulnerability (2785220)

This host is missing an important security update according to Microsoft Bulletin MS13-006. OpenVAS Vulnerability Test $Id: secpodms13-006.nasl 5346 2017-02-19 08:43:11Z cfi $ Microsoft Windows Security Feature Bypass Vulnerability 2785220 Authors: Veerendra G.G Copyright: Copyright c 2013 SecPod...

CVE-2013-0009: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Microsoft System Center Operations Manager 2007 SP1 and R2 allows remote attackers to inject arbitrary web script or HTML via crafted input, aka "System Center Operations Manager Web Console XSS Vulnerability," a different vulnerability than CVE-2013-0010...

Microsoft Windows Print Spooler Remote Code Execution Vulnerability (2769369)

This host is missing a critical security update according to Microsoft Bulletin MS13-001. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft System Center Operations Manager XSS Vulnerabilities (2748552)

This host is missing an important security update according to Microsoft Bulletin MS13-003. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2012-4693

Invensys Wonderware InTouch 2012 R2 and earlier and Siemens ProcessSuite use a weak encryption algorithm for data in Pssecurity.ini, which makes it easier for local users to discover passwords by reading this file...

CVE-2012-4693: Undefined Security Weakness

Invensys Wonderware InTouch 2012 R2 and earlier and Siemens ProcessSuite use a weak encryption algorithm for data in Pssecurity.ini, which makes it easier for local users to discover passwords by reading this file...