Microsoft Windows远程安装服务远程任意指令执行漏洞（MS06-077）

Microsoft Windows是微软发布的非常流行的操作系统。 Windows的远程安装服务（Remote Installation Service）的实现上存在漏洞，远程攻击者可能利用此漏洞在服务器上执行任意指令，从而完全控制系统。 RIS使能了一个TFTP服务，匿名用户可以利用此服务向服务器的任意位置上传任意文件，远程攻击者可以通过覆盖系统文件执行任意指令。 Microsoft Windows 2000SP4 如果您不能立刻安装补丁或者升级，SEBUG建议您采取以下措施以降低威胁： 配置TFTP服务为只读 在防火墙上过滤UDP/69端口 不需要的时候停止TFTP服务 厂商补丁：...

Microsoft Security Bulletin MS06-077 Vulnerability in Remote Installation Service Could Allow Remote Code Execution (926121)

Microsoft Security Bulletin MS06-077 Vulnerability in Remote Installation Service Could Allow Remote Code Execution 926121 Published: December 12, 2006 Version: 1.0 Summary Who Should Read this Document: Customers who use Microsoft Windows Impact of Vulnerability: Remote Code Execution Maximum...

Microsoft RIS Server weak permissions

It's possible to write files via TFTP...

RIS Installation Check

This plugin checks if the equipment was installed via RIS. OpenVAS Vulnerability Test $Id: risdetect.nasl 6056 2017-05-02 09:02:50Z teissa $ Description: RIS Installation Check Authors: Jeff Adams Copyright: Copyright C 2004 Jorge Pinto And Nelson Gomes This program is free software; you can...