BulletProof FTP Client 2010 - Buffer Overflow Vulnerability

Document Title: =============== BulletProof FTP Client 2010 - Buffer Overflow Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=475 Release Date: ============= 2012-04-01 Vulnerability Laboratory ID VL-ID: ====================================...

7-Technologies AQUIS Unspecified Path Subversion Arbitrary DLL Injection Code Execution

Binary data scadaaquis15.nbin...

DNS does not start on Microsoft Windows Server 2008 Domain Controllers

Challenge Cause The Surebackup Domain Controller can't communicate with the replication partners before loading the zone. Solution There is a Microsoft registry key that should be modified only on the Virtual Machines inside the SureBackup job due to the nature of the key. Open Regedit Browse to...

OpenDrive 1.3.141 - Local Password Disclosure

/ Title: OpenDrive include include int ReadRegistryKey LPBYTE lpBuffer, LPDWORD lpBufferSize, HKEY hKey, LPCTSTR lpszSubKey, LPCTSTR lpszValueName HKEY hKeyLocal; int nType; if RegOpenKeyExhKey, lpszSubKey, 0, KEYREAD, &hKeyLocal == ERRORSUCCESS if RegQueryValueEx hKeyLocal, lpszValueName, 0,...

OpenDrive 1.3.141 - Local Password Disclosure

OpenDrive 1.3.141 - Local Password Disclosure / Title: OpenDrive include include int ReadRegistryKey LPBYTE lpBuffer, LPDWORD lpBufferSize, HKEY hKey, LPCTSTR lpszSubKey, LPCTSTR lpszValueName HKEY hKeyLocal; int nType; if RegOpenKeyExhKey, lpszSubKey, 0, KEYREAD, &hKeyLocal == ERRORSUCCESS if...

CVE-2011-0037

Microsoft Malware Protection Engine before 1.1.6603.0, as used in Microsoft Malicious Software Removal Tool MSRT, Windows Defender, Security Essentials, Forefront Client Security, Forefront Endpoint Protection 2010, and Windows Live OneCare, allows local users to gain privileges via a crafted val...

Microsoft Windows SMB Registry : Win 7 / Server 2008 R2 Service Pack Detection

It is possible to determine the Service Pack version of the Windows 7 / Server 2008 R2 system by reading the registry key 'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\CSDVersion'. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid52459; scriptversion"1.9";...

MS KB2491888: Microsoft Malware Protection Engine (MMPE) Privilege Escalation

A vulnerable version of Microsoft Malware Protection Engine MMPE is installed on the remote system. MMPE is typically included with Microsoft anti-malware products such as Windows Live OneCare, Microsoft Security Essentials, Microsoft Forefront Client Security, Microsoft Forefront Client Security...

Microsoft Issues Fix for Bug in Malware Protection Engine

Microsoft has issued an update to its core malware protection engine that fixes a bug that could allow an attacker to gain LocalSystem privileges on a vulnerable machine if a specific set of odd conditions exist. The vulnerability in the Microsoft Malware Protection Engine is a privilege-escalati...

CVE-2010-3961

The Consent User Interface UI in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly handle an unspecified registry-key value, which allows local users with SeImpersonatePrivilege rights to gain privileges via a crafted application, aka...

Consent User Interface Privilege Escalation Vulnerability (2442962)

This host is missing a critical security update according to Microsoft Bulletin MS10-100. OpenVAS Vulnerability Test $Id: secpodms10-100.nasl 5361 2017-02-20 11:57:13Z cfi $ Consent User Interface Privilege Escalation Vulnerability 2442962 Authors: Veerendra GG Copyright: Copyright c 2010 SecPod,...

PT-2010-5474 · Microsoft · Windows Xp +5

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions prior to Windows XP SP4, Windows Server 2003 SP3, Windows Vista SP3, Windows Server 2008 SP3, and Windows 7 SP1 Description: An elevation of privilege issue exists due to the improper interaction of drivers with the...

Microsoft Windows RtlQueryRegistryValues() does not adequately validate registry data

Overview Microsoft Windows does not adequately validate registry data read using the function RtlQueryRegistryValues. By modifying an EUDC registry key value, a local user could execute arbitrary code with SYSTEM privileges. Description Microsoft Windows supports end-user-defined characters EUDC ...

Insecure Loading of Dynamic Link Libraries in Windows Applications

US-CERT is aware of a class of vulnerabilities related to how some Windows applications may load external dynamic link libraries DLLs. When an application loads a DLL without specifying a fully qualified path name, Windows will attempt to locate the DLL by searching a defined set of directories. ...

US-CERT Technical Cyber Security Alert TA10-238A -- Microsoft Windows Insecurely Loads Dynamic Libraries

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 National Cyber Alert System Technical Cyber Security Alert TA10-238A Microsoft Windows Insecurely Loads Dynamic Libraries Original release date: August 26, 2010 Last revised: -- Source: US-CERT Systems Affected Any application running on the Microsoft...

Microsoft Windows - Tracing Registry Key ACL Privilege Escalation

Microsoft Windows - Tracing Registry Key ACL Privilege Escalation source: https://www.securityfocus.com/bid/42269/info Microsoft Windows is prone to a local privilege-escalation vulnerability. An attacker can exploit this issue to execute arbitrary code with SYSTEM-level privileges. Successful...

Microsoft Windows - Tracing Registry Key ACL Privilege Escalation

source: https://www.securityfocus.com/bid/42269/info Microsoft Windows is prone to a local privilege-escalation vulnerability. An attacker can exploit this issue to execute arbitrary code with SYSTEM-level privileges. Successful exploits will result in the complete compromise of affected computer...

NtUserCheckAccessForIntegrityLevel Use-After-Free Vulnerability

Windows Vista/Server 2008 NtUserCheckAccessForIntegrityLevel Use- after-free Vulnerability Intro: Due to hostility toward security researchers, the most recent example being of Tavis Ormandy, a number of us from the industry and some not from the industry have come together to form MSRC: the...

Microsoft Windows Vista2008 - NtUserCheckAccessForIntegrityLevel Use-After-Free

Microsoft Windows Vista2008 - NtUserCheckAccessForIntegrityLevel Use-After-Free Windows Vista/Server 2008 NtUserCheckAccessForIntegrityLevel Use-after-free Vulnerability Intro: Due to hostility toward security researchers, the most recent example being of Tavis Ormandy, a number of us from the...

Trellian FTP Version Detection

This script finds the installed Trellian FTP version and saves the result in KB. OpenVAS Vulnerability Test $Id: secpodtrellianftpdetect.nasl 5372 2017-02-20 16:26:11Z cfi $ Trellian FTP Version Detection Authors: Sooraj KS Copyright: Copyright c 2010 SecPod, http://www.secpod.com This program is...