383 matches found
KB5028226: Windows Server 2008 Security Update (July 2023)
The remote Windows host is missing security update 5028226. It is, therefore, affected by multiple vulnerabilities - Windows Routing and Remote Access Service RRAS Remote Code Execution Vulnerability CVE-2023-35365, CVE-2023-35366, CVE-2023-35367 - Windows Netlogon Information Disclosure...
KB5028185: Windows 11 version 22H2 Security Update (July 2023)
The remote Windows host is missing security update 5028185. It is, therefore, affected by multiple vulnerabilities - Windows Routing and Remote Access Service RRAS Remote Code Execution Vulnerability CVE-2023-35365, CVE-2023-35366, CVE-2023-35367 - Windows Netlogon Information Disclosure...
March 14, 2023—KB5023702 (OS Build 17763.4131)- EXPIRED
None None...
March 14, 2023—KB5023705 (OS Build 20348.1607)
None None...
July 12, 2022—KB5015870 (Security-only update)
None None...
July 12, 2022—KB5015877 (Security-only update)
None None...
July 12, 2022—KB5015875 (Security-only update)
None None...
July 12, 2022—KB5015808 (OS Build 14393.5246) - EXPIRED
None None...
July 12, 2022—KB5015863 (Monthly Rollup)
None None...
September 14, 2021 Security Update (KB5005567)
None None...
Microsoft Windows RRAS Service MIBEntryGet Overflow
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Microsoft Windows RRAS Service MIBEntryGet Overflow', 'Description' = %q This module exploits an overflow in the Windows Routing and Remote Acces...
CVE-2020-1383 Windows RRAS Service Information Disclosure Vulnerability
...
CVE-2020-1383
CVE-2020-1383 is an information disclosure vulnerability in Windows RRAS: when Routing and Remote Access is enabled, an attacker can exploit a flaw in RPC handling to obtain information that could aid compromise. Exploitation requires a crafted application against an RPC server with RRAS enabled ...
CVE-2020-1383 Windows RRAS Service Information Disclosure Vulnerability
...
Windows RRAS Service Information Disclosure Vulnerability
An information disclosure vulnerability exists in RPC if the server has Routing and Remote Access enabled. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system To exploit this vulnerability, an attacker would need to run a...
KLA11929 Multiple vulnerabilities in Microsoft Products (ESU)
Multiple vulnerabilities were found in Microsoft Products Extended Support Update. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. A memory corruption...
Windows RRAS Service Remote Code Execution Vulnerability
Added: 06/06/2018 BID: 102055 Background Routing Remote Access Service RRAS is a Microsoft API that can be used to create client applications. These applications display RAS common dialog boxes, manage remote access connections and devices, and manipulate phone-book entries. These APIs make it...
Windows RRAS Service Remote Code Execution Vulnerability
Added: 06/06/2018 BID: 102055 Background Routing Remote Access Service RRAS is a Microsoft API that can be used to create client applications. These applications display RAS common dialog boxes, manage remote access connections and devices, and manipulate phone-book entries. These APIs make it...
Windows RRAS Service Remote Code Execution Vulnerability
Added: 06/06/2018 BID: 102055 Background Routing Remote Access Service RRAS is a Microsoft API that can be used to create client applications. These applications display RAS common dialog boxes, manage remote access connections and devices, and manipulate phone-book entries. These APIs make it...
Microsoft Windows 2003 SP2 - RRAS SMB Remote Code Execution Exploit
Exploit for windows platform in category remote exploits !/usr/bin/env python -- coding: utf-8 -- Tested in Windows Server 2003 SP2 ES - Only works when RRAS service is enabled. The exploited vulnerability is an arbitraty pointer deference affecting the dwVarID field of the MIBOPAQUEQUERY...