CVE-2018-3268

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: SMB Server. The supported version that is affected is 11.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via SMB to compromise Solaris. Successful attacks of this...

CVE-2018-3269

CVE-2018-3269 affects Oracle Solaris (Sun Systems Products Suite) under the Solaris component, subcomponent SMB Server (solaris 11.3). The vulnerability is exploitable by a low-privileged attacker over the network via SMB, potentially causing a partial denial of service to Solaris. The source doc...

Tor Browser SMB Deanonymization / Information Disclosure

Advisory ID: SGMA18-002 Title: Tor Browser Deanonymization With SMB Product: Tor Browser 8.0, Firefox 62 / 60.2.0esr Vendor: torproject.org, mozilla.org Type: Information Disclosure Risk level: 4 / 5 Credits: [email protected] CVE: CVE-2017-16639 Vendor notification: 2017-11-02...

Microsoft Windows SMB Server CVE-2018-8335 Denial of Service Vulnerability

Description Microsoft Windows is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to cause a denial-of-service condition. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 1607 for x64-based Systems Microso...

Microsoft Windows SMB Server CVE-2018-8444 Information Disclosure Vulnerability

Description Microsoft Windows is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks. Technologies Affected Microsoft Windows 10 for 32-bit Systems Microsoft Windows 10 for x64-based Systems...

June 21, 2018—KB4284863 (Preview of Monthly Rollup)

None None...

Microsoft Windows: Enable insecure guest logons

This test checks the setting for policy OpenVAS Vulnerability Test $Id: wininsecureguestlogons.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Enable insecure guest logons Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is...

Microsoft Windows: Microsoft network server: Digitally sign communications (if client agrees)

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winnssigncommunicationpossible.nasl 11532 2018-09-21 19:07:30Z cfischer $ Check value for Microsoft network server: Digitally sign communications if client agrees Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone...

Microsoft Outlook Information Disclosure Vulnerability

An information disclosure vulnerability exists in Outlook when a message is opened. This vulnerability could potentially result in the disclosure of sensitive information to a malicious site. To exploit the vulnerability, an attacker would have to send a malicious email to a user and convince the...

Microsoft Office Information Disclosure Vulnerability

An information disclosure vulnerability exists when Office renders Rich Text Format RTF email messages containing OLE objects when a message is opened or previewed. This vulnerability could potentially result in the disclosure of sensitive information to a malicious site. To exploit the...

Microsoft Windows SMB Server 'MIBEntryGet()' Function Remote Code Execution Vulnerability

Microsoft Windows is the popular computer operating system. A remote code execution vulnerability exists in Microsoft Windows. An attacker could exploit the vulnerability to execute arbitrary code on the target system...

February 13, 2018—KB4074597 (Security-only update)

None None...

February 13, 2018—KB4074594 (Monthly Rollup)

None None...

Microsoft Windows SMB Server CVE-2018-0833 Denial of Service Vulnerability

Description Microsoft Windows is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to cause a denial-of-service condition. Technologies Affected Microsoft Windows 8.1 for 32-bit Systems Microsoft Windows 8.1 for x64-based Systems Microsoft Windows RT 8.1...

Microsoft Windows - NTFS OwnerMandatory Label Privilege Bypass

Microsoft Windows - NTFS OwnerMandatory Label Privilege Bypass / Windows: NTFS Owner/Mandatory Label Privilege Bypass EoP Platform: Windows 10 1709 not tested 8.1 Update 2 or Windows 7 Class: Elevation of Privilege Summary: When creating a new file on an NTFS drive it’s possible to circumvent...

Microsoft Windows SMB Server (v1v2) - Mount Point Arbitrary Device Open Privilege Escalation

Microsoft Windows SMB Server v1v2 - Mount Point Arbitrary Device Open Privilege Escalation Windows: SMB Server v1 and v2 Mount Point Arbitrary Device Open EoP Platform: Windows 10 1703 and 1709 seems the same on 7 and 8.1 but not extensively tested Class: Elevation of Privilege Summary: The SMB...

Microsoft Windows SMB Server (v1/v2) - Mount Point Arbitrary Device Open Privilege Escalation

Windows: SMB Server v1 and v2 Mount Point Arbitrary Device Open EoP Platform: Windows 10 1703 and 1709 seems the same on 7 and 8.1 but not extensively tested Class: Elevation of Privilege Summary: The SMB server driver srv.sys and srv2.sys don't check the destination of a NTFS mount point when...

Microsoft Windows SMB Server (v1 and v2) - Mount Point Arbitrary Device Open Privilege Escalation Ex

Exploit for windows platform in category dos / poc Windows: SMB Server v1 and v2 Mount Point Arbitrary Device Open EoP Platform: Windows 10 1703 and 1709 seems the same on 7 and 8.1 but not extensively tested Class: Elevation of Privilege Summary: The SMB server driver srv.sys and srv2.sys don't...

Microsoft Windows - NTFS Owner/Mandatory Label Privilege Bypass Exploit

Exploit for windows platform in category dos / poc / Windows: NTFS Owner/Mandatory Label Privilege Bypass EoP Platform: Windows 10 1709 not tested 8.1 Update 2 or Windows 7 Class: Elevation of Privilege Summary: When creating a new file on an NTFS drive it’s possible to circumvent security checks...

Microsoft Windows - NTFS Owner/Mandatory Label Privilege Bypass

/ Windows: NTFS Owner/Mandatory Label Privilege Bypass EoP Platform: Windows 10 1709 not tested 8.1 Update 2 or Windows 7 Class: Elevation of Privilege Summary: When creating a new file on an NTFS drive it’s possible to circumvent security checks for setting an arbitrary owner and mandatory label...