MS02-045: Microsoft Windows SMB Protocol SMB_COM_TRANSACTION Packet Remote Overflow DoS (326830) (uncredentialed check)

The remote host is vulnerable to a denial of service attack in its SMB stack. An attacker may exploit this flaw to crash the remote host remotely, without any authentication. C Tenable Network Security, Inc. This script was written by Renaud Deraison Thanks to Ivan Arce who provided me with all t...

Microsoft Windows Server Message Block (SMB) fails to properly handle SMB_COM_TRANSACTION packets requesting NetServerEnum2 transaction

Overview Microsoft Server Message Block SMB may crash when it receives a crafted SMBCOMTRANSACTION packet requesting a NetServerEnum2 transaction. Attackers can use this vulnerability to cause a denial of service. Description SMB is a protocol for sharing data and resources between computers. It ...

Microsoft Windows XP2000NT 4.0 - Network Share Provider SMB Request Buffer Overflow (1)

Microsoft Windows XP2000NT 4.0 - Network Share Provider SMB Request Buffer Overflow 1 // source: https://www.securityfocus.com/bid/5556/info Microsoft Windows operating systems use the Server Message Block SMB protocol to support services such as file and printer sharing. A buffer overflow...

Microsoft Windows XP/2000/NT 4.0 - Network Share Provider SMB Request Buffer Overflow (1)

// source: https://www.securityfocus.com/bid/5556/info Microsoft Windows operating systems use the Server Message Block SMB protocol to support services such as file and printer sharing. A buffer overflow vulnerability has been reporting in the handling of some malformed SMB requests. An attacker...

CVE-2002-0401

SMB dissector in Ethereal 0.9.3 and earlier allows remote attackers to cause a denial of service crash or execute arbitrary code via malformed packets that cause Ethereal to dereference a NULL pointer...

Microsoft Windows SMB Service Detection

The remote service understands the CIFS Common Internet File System or Server Message Block SMB protocol, used to provide shared access to files, printers, etc between nodes on a network. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid11011; scriptversion"1.43";...

SMB Scope

This plugin configures Nessus so that it knows if it should query local information on each host or information pertaining to the domain ie: requests will be forwarded to the PDC. If you test a single workstation, you want information about the domain. If you test the whole network, including the...

Microsoft Windows User Groups List

Using the supplied credentials it was possible to retrieve the list of groups each user belongs to. Groups are stored in the KB for further checks. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid10894; scriptversion"1.20"; scriptnameenglish:"Microsoft Windows User...

Microsoft Windows User Aliases List

Using the supplied credentials it was possible to retrieve the list of groups each user belong to. Aliases are stored in the KB for further checks. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid10893; scriptversion"1.20"; scriptnameenglish:"Microsoft Windows User...

SMB Use Host SID to Enumerate Local Users

Using the host security identifier SID, Nessus was able to enumerate local users on the remote Windows system. C Tenable Network Security, Inc. @PREFERENCES@ include"compat.inc"; if description scriptid10860; scriptversion"1.62"; scriptsetattributeattribute:"pluginmodificationdate",...

Microsoft Windows SMB NativeLanManager Remote System Information Disclosure

Nessus was able to obtain the remote operating system name and version Windows and/or Samba by sending an authentication request to port 139 or 445. Note that this plugin requires SMB to be enabled on the host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10785;...

CVE-1999-1237

CVE-1999-1237 describes multiple buffer overflows in the smbvalid/smbval SMB authentication library, as used by Apache::AuthenSmb and potentially other modules. The vulnerability allows remote attackers to execute arbitrary commands by sending excessively long usernames, passwords, or via other u...

CVE-1999-1237

Multiple buffer overflows in smbvalid/smbval SMB authentication library, as used in Apache::AuthenSmb and possibly other modules, allows remote attackers to execute arbitrary commands via 1 a long username, 2 a long password, and 3 other unspecified methods...

Gene6 BPFTP FTP Server 2.0 - User Credentials Disclosure

Gene6 BPFTP FTP Server 2.0 - User Credentials Disclosure source: https://www.securityfocus.com/bid/2534/info G6 FTP Server now known as BPFTP Server is an internet FTP server by Gene6 If a logged in FTP user connects to an external share and submits a malformed 'size' or 'mdtm' command, the user...

CVE-2000-1227

Windows NT 4.0 and Windows 2000 hosts allow remote attackers to cause a denial of service unavailable connections by sending multiple SMB SMBnegprots requests but not reading the response that is sent back...

CVE-2000-0885

Buffer overflows in Microsoft Network Monitor Netmon allow remote attackers to execute arbitrary commands via a long Browser Name in a CIFS Browse Frame, a long SNMP community name, or a long username or filename in an SMB session, aka the "Netmon Protocol Parsing" vulnerability. NOTE: It is high...

Apple Mac DoS

I have noticed some unusual behaviour with Mac OS 9 I am not a Mac user so I apologize if this is a known bug I have checked the archives and generally on the Net and can find no mention of this effect any way a bit of background... I was nmaping a mac running os 9 to see if I could diagnose why ...

Microsoft Windows SMB Registry : NT RAS Administration Registry Key Permission Weakness Local Privilege Escalation

This script checks whether the following key can be modified by non-admins : HKLM\Software\Microsoft\Windows\RAS Write access to this key allows an unprivileged user to gain additional privileges. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10567;...

CVE-2000-0885

CVE-2000-0885 covers multiple buffer overflows in Microsoft Network Monitor (Netmon) parsers. The vulnerabilities occur in browser.dll (CIFS Browse Frame), snmp.dll (SNMP community name), and smb.dll (SMB sessions) where unchecked string handling can overflow stacks, enabling remote arbitrary cod...

NSFOCUS SA2000-03: Microsoft WIN9X Share Service File Handle Vulnerability

NSFOCUS Security AdvisorySA2000-03 Topic : Microsoft WIN9X Share Service File Handle Vulnerability Release Dateёє July 10, 2000 Update Dateёє Oct 11, 2000 Affected System: ================= - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows 98 Second Edition Non-affected Systemёє...