Design/Logic Flaw

Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect availability via vectors related to SMB server kernel module...

CVE-2014-4275

CVE-2014-4275 affects Oracle Solaris 11 SMB server kernel module; local users can impact availability. The issue is addressed in Oracle’s oct2014 CPU SRU0 patch for Solaris 11.

CVE-2014-4275

Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect availability via vectors related to SMB server kernel module...

CVE-2014-6490: Undefined Security Weakness

Unspecified vulnerability in Oracle Sun Solaris 11 allows remote attackers to affect availability via vectors related to SMB server user component...

PT-2014-5772

Name of the Vulnerable Software and Affected Versions Oracle Sun Solaris version 11 Description The issue affects the availability of the system and is related to the SMB server kernel module. Recommendations For Oracle Sun Solaris version 11, at the moment, there is no information about a newer...

PT-2014-7252

Name of the Vulnerable Software and Affected Versions Oracle Sun Solaris version 11 Description The issue affects the availability of the system and is related to the SMB server user component. Recommendations For Oracle Sun Solaris version 11, at the moment, there is no information about a newer...

CVE-2014-4275: Undefined Security Weakness

Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect availability via vectors related to SMB server kernel module...

openSUSE Security Update : python-cupshelpers (openSUSE-SU-2011:1331-2)

This update fixes a typo from the previous update : system-config-printer used an unauthenticated connection when downloading printer drivers from openprinting.org CVE-2011-4405. This update disables the printer driver download feature. system-config-printer did not properly quote shell meta...

HP Data Protector - CMD Install Service (Metasploit)

HP Data Protector - CMD Install Service Metasploit This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ Exploit Title: HP Data...

Sun Java Web Start Double Quote Injection Vulnerability

This Metasploit module exploits a flaw in the Web Start component of the Sun Java Runtime Environment. Parameters intial-heap-size and max-heap-size in a JNLP file can contain a double quote which is not properly sanitized when creating the command line for javaw.exe. This allows the injection of...

Sun Java Web Start Double Quote Injection

======================================================== Java Web Start Double Quote Inject Remote Code Execution ======================================================== Date: Jun 12 2012 updated: Jun 6 2013 Author: Rh0 Version: At least Java 1.6.31 to 1.6.35 and 1.7.03 to 1.7.07 Tested on:...

Nmap NSE 6.01: smb-server-stats

This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Windows NetLM Downgrade Attack

This module changes the system LmCompatibilityLevel registry value to enable sending LM challenge hashes and initiates a SMB connection to the host specified in the SMBHOST module option. If an SMB server is listening, it will receive the NetLM hashes for the session user. This module requires...

Microsoft SMB Server Trans2 Request RCE Vulnerability

This host is missing a critical security update according to Microsoft Bulletin MS10-054. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

HP Data Protector 6.10/6.11/6.20 Install Service

This module exploits HP Data Protector OmniInet process on Windows only. This exploit invokes the install service function which allows an attacker to create a custom payload in the format of an executable. To ensure this works, the SMB server created in MSF must have a share called Omniback whic...

MS11-048: Vulnerability in SMB Server Could Allow Denial of Service (2536275) (remote check)

Binary data smbkb2536275.nbin...

CVE-2011-1267

The SMB server in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to cause a denial of service system hang via a crafted 1 SMBv1 or 2 SMBv2 request, aka "SMB Request Parsing Vulnerability."...

Spoofing

The SMB server in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to cause a denial of service system hang via a crafted 1 SMBv1 or 2 SMBv2 request, aka "SMB Request Parsing Vulnerability."...

CVE-2011-1267

The SMB server in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to cause a denial of service system hang via a crafted 1 SMBv1 or 2 SMBv2 request, aka "SMB Request Parsing Vulnerability."...

CVE-2011-1267

CVE-2011-1267 affects the SMB server in Windows Vista SP1/SP2, Windows Server 2008 (Gold, SP2, R2, R2 SP1), and Windows 7 (Gold, SP1). The vulnerability allows remote attackers to cause a denial of service (system hang) by sending crafted SMB requests (SMBv1 or SMBv2). Multiple connected sources ...