wireshark -- multiple vulnerabilities

The remote host is missing an update to the system as announced in the referenced advisory. VID 8a835235-ae84-11dc-a5f9-001a4d49522b OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: kdebase, kdelibs

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Samba group_mapping.tdb/group_mapping.ldb创建不安全文件漏洞

CVECAN ID: CVE-2008-3789 Samba是一套实现SMB（Server Messages Block）协议、跨平台进行文件共享和打印共享服务的程序。 Samba在文件创建设置访问权限时存在漏洞，在手工删除/var/lib/samba中的groupmapping.tdb或groupmapping.ldb文件后，samba会重新创建这个文件并将权限设置为0666，这允许访问系统的任意用户修改这个文件。 Samba 3.2.0 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.samba.org/...

SMB Registry : Windows Build Number and Service Pack Version

Detection of the installed Windows build number and Service Pack version. The script logs in via SMB, reads various registry keys to retrieve the Windows build number and Service Pack version. SPDX-FileCopyrightText: 2008 Renaud Deraison Some text descriptions might be excerpted from a referenced...

Apple Safari Detection (Windows SMB Login)

SMB login-based detection of Apple Safari. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.900003...

Microsoft Office Products Detection (Windows SMB Login)

SMB login-based detection of Microsoft Office Products. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Enumerates List of Windows Hotfixes

This script will enumerates the list of all installed hotfixes on the remote host and sets Knowledge Base. OpenVAS Vulnerability Test $Id: secpodregenum.nasl 5336 2017-02-18 15:08:15Z cfi $ Description: Enumerates List of Windows Hotfixes Authors: Chandan S Updated By: Antu Sanadi on 2010-08-18 -...

Security Best Practice: Familiarize Yourself with the General CIFS Worm Catcher

A worm is a self-replicating malware malicious software that propagates by actively sending itself to new machines. CIFS, The Common Internet File System sometimes called SMB is a protocol for sharing files and printers. The protocol is implemented and widely used by Microsoft operating systems, ...

MS08-041: Vulnerability in the ActiveX Control for the Snapshot Viewer for Microsoft Access Could Allow Remote Code Execution (955617)

The remote host contains a version of the ActiveX control for the Snapshot Viewer for Microsoft Access which is vulnerable to a security flaw that could allow an attacker to execute arbitrary code on the remote host by constructing a malicious web page and entice a victim to visit it. C Tenable...

Sun Solaris snoop format string vulnerability

Format string vulnerability on SMB traffic parsing...

iDefense Security Advisory 08.04.08: Solaris snoop SMB Decoding Multiple Format String Vulnerabilities

iDefense Security Advisory 08.04.08 http://labs.idefense.com/intelligence/vulnerabilities/ Aug 04, 2008 I. BACKGROUND The snoop command line utility is installed by default on Solaris. It is used to capture and display network traffic, similar to the widely used tcpdump program. Server Message...

iDefense Security Advisory 08.04.08: Solaris snoop SMB Decoding Multiple Stack Buffer Overflow Vulnerabilities

iDefense Security Advisory 08.04.08 http://labs.idefense.com/intelligence/vulnerabilities/ Aug 04, 2008 I. BACKGROUND The snoop command line utility is installed by default on Solaris. It is used to capture and display network traffic, similar to the widely used tcpdump program. Server Message...

CVE-2008-0965

Multiple format string vulnerabilities in snoop on Sun Solaris 8 through 10 and OpenSolaris before snv96, when the -o option is omitted, allow remote attackers to execute arbitrary code via format string specifiers in an SMB packet...

Format string

Multiple format string vulnerabilities in snoop on Sun Solaris 8 through 10 and OpenSolaris before snv96, when the -o option is omitted, allow remote attackers to execute arbitrary code via format string specifiers in an SMB packet...

Stack overflow

Multiple stack-based buffer overflows in snoop on Sun Solaris 8 through 10 and OpenSolaris before snv96, when the -o option is omitted, allow remote attackers to execute arbitrary code via a crafted SMB packet...

CVE-2008-0964

The CVE-2008-0964 issue affects SunOS/Solaris snoop for several Solaris releases. The root cause is a stack-based buffer overflow in snoop when handling SMB traffic with the -o option omitted, enabling remote code execution. Concrete fixes are available via Solaris patch updates: 108964-11 (Solar...

CVE-2008-0964

Multiple stack-based buffer overflows in snoop on Sun Solaris 8 through 10 and OpenSolaris before snv96, when the -o option is omitted, allow remote attackers to execute arbitrary code via a crafted SMB packet...

CVE-2008-0965

Multiple format string vulnerabilities in snoop on Sun Solaris 8 through 10 and OpenSolaris before snv96, when the -o option is omitted, allow remote attackers to execute arbitrary code via format string specifiers in an SMB packet...

CVE-2008-0965

CVE-2008-0965 describes multiple format-string vulnerabilities in Solaris snoop in SunOS/Solaris 8–10 (OpenSolaris before snv_96). The connected Nessus/OpenVAS data identify affected components as snoop in SunOS/Solaris and reference specific patches: 138083-01 (Solaris 10 SPARC) and 138084-01 (S...

Sun Solaris 'snoop(1M)'工具远程命令执行漏洞

BUGTRAQ ID: 30556 CVE ID：CVE-2008-0964 CVE-2008-0965 CNCVE ID：CNCVE-20080964 CNCVE-20080965 Sun Solaris是一款商业性质的操作系统。 snoop1M网络工具相关的SMB通信显示存在安全问题，远程攻击者可以利用漏洞以'nobody'权限或其他本地用户权限执行任意命令。 目前没有详细漏洞细节提供。 如下平台受此漏洞影响： Solaris 10 Solaris 9 Solaris 8 OpenSolaris builds snv01 to snv95 Sun Solaris 9x86 Sun...