SMB NativeLanMan

It is possible to extract OS, domain and SMB server information from the Session Setup AndX Response packet which is generated during NTLM authentication. SPDX-FileCopyrightText: 2009 LSS SPDX-FileCopyrightText: New detection methods / pattern / code since 2009 Greenbone AG Some text descriptions...

WinRAR Version Detection

This script finds the installed WinRAR. The script logs in via smb, searches for WinRAR in the registry and gets the version. Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Design/Logic Flaw

Samba 3.4 before 3.4.2, 3.3 before 3.3.8, 3.2 before 3.2.15, and 3.0.12 through 3.0.36, as used in the SMB subsystem in Apple Mac OS X 10.5.8 when Windows File Sharing is enabled, Fedora 11, and other operating systems, does not properly handle errors in resolving pathnames, which allows remote...

CVE-2009-2813

Samba 3.4 before 3.4.2, 3.3 before 3.3.8, 3.2 before 3.2.15, and 3.0.12 through 3.0.36, as used in the SMB subsystem in Apple Mac OS X 10.5.8 when Windows File Sharing is enabled, Fedora 11, and other operating systems, does not properly handle errors in resolving pathnames, which allows remote...

CVE-2009-2813

CVE-2009-2813 affects Samba where SMB path resolution errors allow remote authenticated users to bypass sharing restrictions and read/create/modify files, specifically in versions: 3.0.12–3.0.36, 3.2.x before 3.2.15, 3.3.x before 3.3.8, and 3.4.x before 3.4.2, when used in the SMB subsystem of OS...

VideoLAN VLC Media Player SMB Module Win32AddConnection Buffer Overflow

Added: 09/11/2009 CVE: CVE-2009-2484 BID: 35500 OSVDB: 55509 Background VLC media player is a media player supporting various audio and video formats for multiple platforms. Problem A stack-based buffer overflow vulnerability in the Win32AddConnection function may allow a remote attacker to execu...

IBM Lotus Notes Detection (Windows SMB Login)

This script detects the installed version of IBM Lotus Notes. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Firebird SQL Detection (Windows SMB Login)

SMB login-based detection of Firebird SQL. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.800851...

VideoLAN VLC Media Player SMB Module Win32AddConnection Buffer Overflow

Added: 09/11/2009 CVE: CVE-2009-2484 BID: 35500 OSVDB: 55509 Background VLC media player is a media player supporting various audio and video formats for multiple platforms. Problem A stack-based buffer overflow vulnerability in the Win32AddConnection function may allow a remote attacker to execu...

VideoLAN VLC Media Player SMB Module Win32AddConnection Buffer Overflow

Added: 09/11/2009 CVE: CVE-2009-2484 BID: 35500 OSVDB: 55509 Background VLC media player is a media player supporting various audio and video formats for multiple platforms. Problem A stack-based buffer overflow vulnerability in the Win32AddConnection function may allow a remote attacker to execu...

VideoLAN VLC Media Player SMB Module Win32AddConnection Buffer Overflow

Added: 09/11/2009 CVE: CVE-2009-2484 BID: 35500 OSVDB: 55509 Background VLC media player is a media player supporting various audio and video formats for multiple platforms. Problem A stack-based buffer overflow vulnerability in the Win32AddConnection function may allow a remote attacker to execu...

Mac OS X Multiple Vulnerabilities (Security Update 2009-005)

The remote host is running a version of Mac OS X 10.5 or 10.4 that does not have Security Update 2009-005 applied. This security update contains fixes for the following products : - Alias Manager - CarbonCore - ClamAV - ColorSync - CoreGraphics - CUPS - Flash Player plug-in - ImageIO - Launch...

Lame Windows Vista / 7 / 2k8 SMB 2.0 Blue Screen Of Death

\n"; $host = $argv1; $payload = "\x00\x00\x00\x90". "\xff\x53\x4d\x42". "\x72\x00\x00\x00". "\x00\x18\x53\xc8". "\x00\x26". "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xfe". "\x00\x00\x00\x00\x00\x6d\x00\x02\x50\x43\x20\x4e\x45\x54"...

Microsoft Windows SMB Blue Screen Of Death

============================================= - Release date: September 7th, 2009 - Discovered by: Laurent Gaffié - Severity: Medium/High ============================================= I. VULNERABILITY ------------------------- Windows Vista/7 : SMB2.0 NEGOTIATE PROTOCOL REQUEST Remote B.S.O.D. II...

SMB 2.0 Protocol Detection

Detect systems that support the SMB 2.0 protocol...

Microsoft Windows SMB Negotiate Request Remote Code Execution (CVE-2009-2532; CVE-2009-3103)

The SMB Protocol is a network file sharing protocol that is implemented in Microsoft Windows. A remote code execution vulnerability has been reported in the Microsoft Server Message Block SMB Protocol. The vulnerability is due to a memory corruption error in the Microsoft Server Message Block SMB...

Microsoft Windows Vista/7 - SMB2.0 Negotiate Protocol Request Remote Blue Screen of Death (MS07-063)

============================================= - Release date: September 7th, 2009 - Discovered by: Laurent Gaffié - Severity: High ============================================= I. VULNERABILITY ------------------------- Windows Vista, Server 2008 R2, 7 RC : SMB2.0 NEGOTIATE PROTOCOL REQUEST Remo...

Lunascape Version Detection

This script detects the installed version of Lunascape Browser and sets the result in KB. OpenVAS Vulnerability Test $Id: gblunascapedetect.nasl 5372 2017-02-20 16:26:11Z cfi $ Lunascape Version Detection Authors: Sharath S Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Microsoft Windows Vista和Windows 7畸形SMB报文远程拒绝服务漏洞

Windows是微软发布的非常流行的操作系统。 Windows Vista和Windows 7捆绑了新版的SMB2，SRV2.SYS驱动没有正确地处理发送给NEGOTIATE PROTOCOL REQUEST功能的畸形SMB头，如果远程攻击者在发送的SMB报文的Process Id High头字段中包含有“&”字符的话，就会导致系统蓝屏死机。 Microsoft Windows Vista Microsoft Windows Server 2008 Microsoft Windows 7 厂商补丁： Microsoft ---------...

Orca Browser Version Detection

This script detects the installed version of Orca Browser and sets the result in KB. OpenVAS Vulnerability Test $Id: gborcabrowserdetect.nasl 7332 2017-09-29 14:16:56Z cfischer $ Orca Browser Version Detection Authors: Sharath S Copyright: Copyright c 2009 Greenbone Networks GmbH,...