Memory corruption

The SMB client in Microsoft Windows Server 2003 SP2, Vista Gold, SP1, and SP2, and Windows Server 2008 Gold and SP2 allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and reboot via a crafted SMB transaction response...

CVE-2010-0269

CVE-2010-0269 is a remote code execution vulnerability in the Microsoft SMB client. The issue arises from improper memory allocation when parsing specially crafted SMB responses, enabling an unauthenticated attacker to execute arbitrary code on a vulnerable system by sending a crafted SMB respons...

CVE-2010-0477

The SMB client in Microsoft Windows Server 2008 R2 and Windows 7 does not properly handle 1 SMBv1 and 2 SMBv2 response packets, which allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code via a crafted packet that causes the client to read the entirety of the respons...

CVE-2010-0477

CVE-2010-0477 is a remote code execution vulnerability in the Microsoft SMB client. The SMB client in Windows 7 and Windows Server 2008 R2 can be tricked by specially crafted SMB responses (affecting both SMBv1 and SMBv2), allowing an unauthenticated remote attacker to execute arbitrary code on t...

CVE-2010-0476

The SMB client in Microsoft Windows Server 2003 SP2, Vista Gold, SP1, and SP2, and Windows Server 2008 Gold and SP2 allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and reboot via a crafted SMB transaction response...

CVE-2010-0270

The SMB client in Microsoft Windows Server 2008 R2 and Windows 7 does not properly validate fields in SMB transaction responses, which allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and reboot via a crafted 1 SMBv...

Microsoft SMB Client Remote Code Execution Vulnerabilities (980232)

This host is missing a critical security update according to Microsoft Bulletin MS10-020. OpenVAS Vulnerability Test $Id: secpodms10-020.nasl 5934 2017-04-11 12:28:28Z antu123 $ Microsoft SMB Client Remote Code Execution Vulnerabilities 980232 Authors: Antu Sanadi Updated By: Madhuri D on...

MS10-020: Vulnerabilities in SMB Client Could Allow Remote Code Execution (980232)

The version of the SMB client software installed on the remote Windows host may be affected by one or more vulnerabilities, including some that could allow arbitrary code execution : - Incorrect handling of incomplete SMB responses could be abused to cause the system to stop responding...

Microsoft Windows SMB Client Transaction Response Remote Stack Buffer Overflow Vulnerability

Description Microsoft Windows is prone to a remote stack-based buffer-overflow vulnerability. An attacker can exploit this issue to execute code with SYSTEM-level privileges. Failed exploit attempts will likely cause denial-of-service conditions. Technologies Affected Avaya Meeting Exchange -...

Microsoft Windows SMB Client Message Size Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute code with SYSTEM-level privileges. Failed exploit attempts will likely cause denial-of-service conditions. Technologies Affected Avaya Meeting Exchange - Client...

DEBIAN-CVE-2010-0926

The default configuration of smbd in Samba before 3.3.11, 3.4.x before 3.4.6, and 3.5.x before 3.5.0rc3, when a writable share exists, allows remote authenticated users to leverage a directory traversal vulnerability, and access arbitrary files, by using the symlink command in smbclient to create...

Microsoft Windows SMB客户端实现竞争条件漏洞（MS10-006）

BUGTRAQ ID: 38100 CVE ID: CVE-2010-0017 Microsoft Windows是微软发布的非常流行的操作系统。 SMB客户端实现没有正确的验证SMB Negotiate响应报文中的字段，远程攻击者可以通过向初始SMB请求的客户端回复特制的SMB响应触发竞争条件，导致完全控制受影响的系统。 这个漏洞在Windows Vista和Windows Server 2008平台上只能导致崩溃或权限提升。 Microsoft Windows Vista SP2 Microsoft Windows Vista SP1 Microsoft Windows Vista...

Microsoft Windows SMB客户端池破坏远程代码执行漏洞（MS10-006）

BUGTRAQ ID: 38093 CVE ID: CVE-2010-0016 Microsoft Windows是微软发布的非常流行的操作系统。 SMB客户端实现没有正确的验证SMB响应中的字段，远程攻击者可以通过向初始SMB请求的客户端回复特制的SMB响应来利用这个漏洞，导致完全控制受影响的系统。 在初始化SMB通讯时客户端会发送Negotiate Protocol报文来协商对话，服务器的响应包含有以下结构： uchar WordCount; / must be 0x11 17 / ushort DialectIndex; / selected dialect / uchar...

CVE-2010-0017

Race condition in the SMB client implementation in Microsoft Windows Server 2008 R2 and Windows 7 allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code, and in the SMB client implementation in Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 allows local...

Race condition

Race condition in the SMB client implementation in Microsoft Windows Server 2008 R2 and Windows 7 allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code, and in the SMB client implementation in Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 allows local...

Memory corruption

The SMB client implementation in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not properly validate response fields, which allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code via a crafted response, aka "SMB Client Pool Corruption...

CVE-2010-0016

The SMB client implementation in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not properly validate response fields, which allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code via a crafted response, aka "SMB Client Pool Corruption...

CVE-2010-0017

Summary: CVE-2010-0017 describes a race condition in the SMB client of Microsoft Windows, affecting Windows Vista (Gold, SP1, SP2), Windows Server 2008 (Gold/SP2) and Windows 7/Server 2008 R2. The vulnerability arises from how the SMB Negotiate response is handled, enabling remote code execution ...

Microsoft SMB Client Remote Code Execution Vulnerabilities (978251)

This host is missing a critical security update according to Microsoft Bulletin MS10-006. OpenVAS Vulnerability Test $Id: secpodms10-006.nasl 5934 2017-04-11 12:28:28Z antu123 $ Microsoft SMB Client Remote Code Execution Vulnerabilities 978251 Authors: Antu Sanadi Updated By: Madhuri D on...

Microsoft SMB Client Remote Code Execution Vulnerabilities (978251)

This host is missing a critical security update according to Microsoft Bulletin MS10-006. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...