Vulnerabilities in Windows Media Runtime Could Allow Remote Code Execution (975682)

This host is missing a critical security update according to Microsoft Bulletin MS09-051. OpenVAS Vulnerability Test $Id: secpodms09-051.nasl 5934 2017-04-11 12:28:28Z antu123 $ Vulnerabilities in Windows Media Runtime Could Allow Remote Code Execution 975682 Authors: Antu Sanadi Updated By:...

DSA-1908-1 samba - several vulnerabilities

Bulletin has no description...

Microsoft Ships Largest Batch of Security Patches

Microsoft today released its largest ever batch of Patch Tuesday updates to fix a whopping 34 security holes in a wide range of widely deployed software products. The latest patch batch covers critical vulnerabilities in software products that are bundled with Microsoft’s dominant Windows operati...

Google Apps googleapps.url.mailto handler command injection

Added: 10/13/2009 BID: 36581 Background Google Apps is a web-based productivity suite hosted by Google. Problem Google Apps handles googleapps.url.mailto URLs by passing the URL as a command-line argument to the googleapps.exe program without sufficiently validating the URL. This allows command...

Microsoft SMB Infinite Loop Denial of Service (MS09-050; CVE-2009-2526)

The SMB Protocol is a network file sharing protocol that is implemented in Microsoft Windows. A denial of service vulnerability has been reported in the way that Microsoft Server Message Block SMB Protocol software handles specially crafted SMB version 2 SMBv2 packets. The vulnerability is due to...

Google Apps googleapps.url.mailto handler command injection

Added: 10/13/2009 BID: 36581 Background Google Apps is a web-based productivity suite hosted by Google. Problem Google Apps handles googleapps.url.mailto URLs by passing the URL as a command-line argument to the googleapps.exe program without sufficiently validating the URL. This allows command...

IBM Installation Manager Detection (Windows SMB Login)

The script detects the installed IBM Installation Manager version. The script logs in via smb, searches for IBM Installation Manager in the registry and gets the version from SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...

Samba错误配置/etc/passwd文件绕过安全限制漏洞

BUGTRAQ ID: 36363 CVE ID: CVE-2009-2813 Samba是一套实现SMB（Server Messages Block）协议、跨平台进行文件共享和打印共享服务的程序。 如果/etc/passwd中的用户错误的配置为拥有空的主目录（::）且启用了自动homes共享，或用该用户名创建了明确的共享，则任何连接到该共享名的客户端都可以访问root（/）之下的整个文件系统。 Samba Samba 3.4 Samba Samba 3.3 Samba Samba 3.2 Samba Samba 3.0 临时解决方法：...

Samba Oplock暂停通知远程拒绝服务漏洞

BUGTRAQ ID: 36573 CVE ID: CVE-2009-2906 Samba是一套实现SMB（Server Messages Block）协议、跨平台进行文件共享和打印共享服务的程序。 如果客户端向Samba服务器发送了非预期的oplock暂停通知回复的话，smbd就会反复对CPU进行旋转（spin），尝试处理该报文，但无法完成处理。这是一种拒绝服务的情况。 Samba Samba 3.4 Samba Samba 3.2 Samba Samba 3.0 厂商补丁： Samba ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Patch Tuesday Heads-Up: 13 Bulletins, 8 Critical

Microsoft is planning a bumper Patch Tuesday next week — 13 bulletins covering 34 security vulnerabilities in a wide range of products. Eight of the 13 bulletins will be rated “critical,” Microsoft’s highest severity rating. According to Microsoft’s advance notice, the patches coming on October 1...

Avast (Free / Business) AntiVirus Detection (Windows SMB Login)

Detects the installed version of Avast Free / Business AntiVirus on Windows. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Samba < 3.0.37 / 3.2.15 / 3.3.8 / 3.4.2 Multiple Vulnerabilities

According to its banner, the version of Samba server on the remote host is earlier than 3.0.37 / 3.2.15 / 3.3.8 / 3.4.2. Such versions are potentially affected by multiple issues : - If a user in '/etc/passwd' is misconfigured to have an empty home directory, then connecting to the home share of...

Samba < 3.0.37 / 3.2.15 / 3.3.8 / 3.4.2 Multiple Vulnerabilities

Binary data 5194.prm...

FTPShell Client Version Detection

Detects the installed version of FTPShell Client Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Microsoft SRV2.SYS SMB Negotiate ProcessID Function Table Dereference

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Microsoft...

VideoLAN VLC Media Player 1.0.2 - smb: URI Stack Overflow

VideoLAN VLC Media Player 1.0.2 - smb: URI Stack Overflow VLC Media Player 1.0.2 smb:// URI Handling Remote Stack Overflow PoC Found By: DrIDE Tested: Windows XP SP2 , XP SP3 and Windows 7 RC1 with VLC 1.0.2 "Goldeneye" Download:...

VLC Media Player 1.0.2 smb:// URI stack overflow PoC

Exploit for unknown platform in category remote exploits ==================================================== VLC Media Player 1.0.2 smb:// URI stack overflow PoC ==================================================== Title: VLC Media Player 1.0.2 smb:// URI stack overflow PoC CVE-ID: OSVDB-ID:...

VideoLAN VLC Media Player 1.0.2 - 'smb://' URI Stack Overflow

VLC Media Player 1.0.2 smb:// URI Handling Remote Stack Overflow PoC Found By: DrIDE Tested: Windows XP SP2 , XP SP3 and Windows 7 RC1 with VLC 1.0.2 "Goldeneye" Download: http://majorgeeks.com/downloadget.php?id=4674&file=1&evp=a87d1b50269ba27878899d30ec7cd947 XPSP3 Crash """ EAX FFFFFFFE ECX...

Mozilla Firefox PKCS11 Module Installation Code Execution

Added: 09/24/2009 CVE: CVE-2009-3076 BID: 36343 OSVDB: 57977 Background Mozilla is a suite of Internet client products available for multiple platforms. Problem The warning dialog displayed when adding or removing security modules via pkcs11.addmodule or pkcs11.deletemodule can be customized by a...

Mozilla Firefox PKCS11 Module Installation Code Execution

Added: 09/24/2009 CVE: CVE-2009-3076 BID: 36343 OSVDB: 57977 Background Mozilla is a suite of Internet client products available for multiple platforms. Problem The warning dialog displayed when adding or removing security modules via pkcs11.addmodule or pkcs11.deletemodule can be customized by a...