SMB : Disable the C$ and ADMIN$ shares after the scan (WMI)

Binary data wmidisableshares.nbin...

SMB : Enable the C$ and ADMIN$ shares during the scan (WMI)

Binary data wmienableshares.nbin...

ejabberd Detection (Windows SMB Login)

This script finds the installed ejabberd version. The script logs in via smb, searches for ejabberd in the registry and gets the version from SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

MS11-048: Vulnerability in SMB Server Could Allow Denial of Service (2536275) (remote check)

Binary data smbkb2536275.nbin...

smb-mbenum NSE Script

Queries information managed by the Windows Master Browser. Script Arguments smb-mbenum.format optional if set, changes the format of the result returned by the script. There are three possible formats: 1. Ordered by type horizontally 2. Ordered by type vertically 3. Ordered by type vertically...

Symantec Backup Exec Version Detection

Detects the installed version of Symantec Backup Exec on Windows. The script logs in via smb, searches for Symantec Backup Exec and gets the version from SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

CVE-2011-1267

The SMB server in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to cause a denial of service system hang via a crafted 1 SMBv1 or 2 SMBv2 request, aka "SMB Request Parsing Vulnerability."...

CVE-2011-1268

The SMB client in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote SMB servers to execute arbitrary code via a crafted 1 SMBv1 or 2 SMBv2 response, aka "SMB Response Parsin...

Spoofing

The SMB server in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to cause a denial of service system hang via a crafted 1 SMBv1 or 2 SMBv2 request, aka "SMB Request Parsing Vulnerability."...

Code injection

The SMB client in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote SMB servers to execute arbitrary code via a crafted 1 SMBv1 or 2 SMBv2 response, aka "SMB Response Parsin...

CVE-2011-1268

The SMB client in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote SMB servers to execute arbitrary code via a crafted 1 SMBv1 or 2 SMBv2 response, aka "SMB Response Parsin...

CVE-2011-1267

The SMB server in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to cause a denial of service system hang via a crafted 1 SMBv1 or 2 SMBv2 request, aka "SMB Request Parsing Vulnerability."...

CVE-2011-1267

CVE-2011-1267 affects the SMB server in Windows Vista SP1/SP2, Windows Server 2008 (Gold, SP2, R2, R2 SP1), and Windows 7 (Gold, SP1). The vulnerability allows remote attackers to cause a denial of service (system hang) by sending crafted SMB requests (SMBv1 or SMBv2). Multiple connected sources ...

Microsoft Windows 'win32k.sys' OpenType字体解析远程代码执行漏洞

Bugtraq ID: 48183 CVE ID：CVE-2011-1873 Microsoft Windows是一款流行的操作系统。 在解析OpenType字体时win32k.sys存在指针验证错误，攻击者在远程WebDAV或SMB共享上构建特制OTF文件，诱使用户打开，可导致在X64或者基于Itanium的系统上以内核上下文执行任意代码。 Microsoft Windows XP Professional x64 Edition SP2 Microsoft Windows Vista x64 Edition SP2 Microsoft Windows Vista x64 Editio...

Microsoft ATL/MFC跟踪工具'dwmapi.dll' DLL装载任意代码执行漏洞

Bugtraq ID: 42811 CVE ID：CVE-2010-3190 Microsoft Visual Studio是微软公司的开发工具套件系列产品，是一个基本完整的开发工具集，包括了软件整个生命周期中所需要的大部分工具。 Microsoft Visual Studio中使用的ATL MFC Trace Tool AtlTraceTool8.exe工具不安全装载'dwmapi.dll'库，攻击者可以诱使用户在远程WebDAV或SMB共享上打开 TRC，cu，rs，rc或res文件，可以以用户安全上下文装载任意库。 Microsoft Visual Studio 2010 0...

Microsoft Windows SMB客户端远程代码执行漏洞

Bugtraq ID: 48184 CVE ID：CVE-2011-1268 Microsoft Windows是一款流行的操作系统。 Microsoft SMB实现处理特制的SMB应答存在错误，未验证攻击者可以向发起连接请求的客户端发送特制SMB应答，可触发此漏洞，成功利用漏洞可以以应用程序上下文执行任意代码。 Microsoft Windows XP Service Pack 3 0 Microsoft Windows XP Professional x64 Edition SP2 Microsoft Windows Vista x64 Edition SP2 Microsoft...

Microsoft Windows SMB Server远程拒绝服务漏洞

Bugtraq ID: 48185 CVE ID：CVE-2011-1267 Microsoft Windows是一款流行的操作系统。 在解析某些SMB请求时，SMB服务器存在未明错误，攻击者提交特制的请求可使服务停止响应，需要手工启动恢复服务 Microsoft Windows Vista x64 Edition SP2 Microsoft Windows Vista x64 Edition SP1 Microsoft Windows Vista SP2 Microsoft Windows Vista SP1 Microsoft Windows Server 2008 R2 x64 S...

Microsoft Windows SMB Server Remote Code Execution Vulnerability (2536275)

This host is missing an important security update according to Microsoft Bulletin MS11-048. OpenVAS Vulnerability Test $Id: secpodms11-048.nasl 5362 2017-02-20 12:46:39Z cfi $ Microsoft Windows SMB Server Remote Code Execution Vulnerability 2536275 Authors: Antu Sanadi Copyright: Copyright c 2011...

Microsoft SMB Client Remote Code Execution Vulnerabilities (2536276)

This host is missing a critical security update according to Microsoft Bulletin MS11-043. OpenVAS Vulnerability Test $Id: secpodms11-043.nasl 5362 2017-02-20 12:46:39Z cfi $ Microsoft SMB Client Remote Code Execution Vulnerabilities 2536276 Authors: Veerendra GG Updated By: Antu Sanadi on...

Microsoft Windows SMB Server Remote Code Execution Vulnerability (2536275)

This host is missing an important security update according to Microsoft Bulletin MS11-048. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...