CVE-2000-1227

CVE-2000-1227 affects Windows NT 4.0 and Windows 2000 hosts. The vulnerability allows remote attackers to cause a denial of service (unavailable connections) by sending multiple SMB SMBnegprots requests without reading the response. The available documents describe the affected products and the S...

MS Windows (SMB) Transaction Response Handling Exploit (MS05-011)

漏洞描述：Windows SMB客户端在处理SMB响应时存在一个缓冲区溢出漏洞。恶意的SMB服务器可以利用这个漏洞在连接该服务器的SMB客户端主机上执行任意命令。MRXSMB.SYS驱动负责执行SMB客户端操作以及处理SMB服务器返回的响应。一些重要的Windows文件共享操作以及所有的RPC-over-named-pipes操作使用SMB命令Trans25h和Trans232h。一个恶意的SMB服务器通过发送特殊的Transaction响应数据可能导致一个缓冲区溢出漏洞。溢出可能发生在任何这个数据被处理的地方，例如MRXSMB.SYS或其他客户端代码中。例如，如果Trans2...

Microsoft Windows - 'SMB' Transaction Response Handling (MS05-011)

/ Windows SMB Client Transaction Response Handling MS05-011 CAN-2005-0045 This works against Win2k cybertronicatgmxdotnet http://www.livejournal.com/users/cybertronic/ usage: gcc -o mssmbpoc mssmbpoc.c ./mssmbpoc connect via \ip and hit the netbios folder! STOP: 0x00000050...

Microsoft Windows - SMB Transaction Response Handling (MS05-011)

Microsoft Windows - SMB Transaction Response Handling MS05-011 / Windows SMB Client Transaction Response Handling MS05-011 CAN-2005-0045 This works against Win2k cybertronicatgmxdotnet http://www.livejournal.com/users/cybertronic/ usage: gcc -o mssmbpoc mssmbpoc.c ./mssmbpoc connect via \ip and...

MS05-027: Vulnerability in SMB Could Allow Remote Code Execution (896422) (uncredentialed check)

The remote version of Windows contains a flaw in the Server Message Block SMB implementation that may allow an attacker to execute arbitrary code on the remote host. An attacker does not need to be authenticated to exploit this flaw. C Tenable Network Security, Inc. include"compat.inc"; if...

CVE-2005-1206

CVE-2005-1206 describes a remote code execution vulnerability in Microsoft Windows SMB implementation. The SMB packet validation process contains a buffer-handling flaw that can allow an unauthenticated attacker to execute arbitrary code by sending specially crafted SMB packets. Affected products...

CVE-2005-1206

Buffer overflow in the Server Message Block SMB functionality for Microsoft Windows 2000, XP SP1 and SP2, and Server 2003 and SP1 allows remote attackers to execute arbitrary code via unknown vectors, aka the "Server Message Block Vulnerability."...

Microsoft Windows SMB file system client buffer overflow

Buffer overflow on nework protocol parsing...

Microsoft Security Bulletin MS05-027 Vulnerability in Server Message Block Could Allow Remote Code Execution (896422)

Microsoft Security Bulletin MS05-027 Vulnerability in Server Message Block Could Allow Remote Code Execution 896422 Issued: June 14, 2005 Version: 1.0 Summary Who should read this document: Customers who use Microsoft Windows Impact of Vulnerability: Remote Code Execution Maximum Severity Rating:...

Microsoft Incoming SMB Packet Validation Remote Buffer Overflow Vulnerability

Description Microsoft SMB is susceptible to a remote buffer overflow vulnerability. This issue is due to a failure of the application to properly bounds check user-supplied data prior to copying it to an insufficiently sized memory buffer. Remote attackers may exploit this vulnerability to execut...

MS05-027: Vulnerability in SMB Could Allow Remote Code Execution (896422)

The remote version of Windows contains a flaw in the Server Message Block SMB implementation that could allow an attacker to execute arbitrary code on the remote host. An attacker does not need to be authenticated to exploit this flaw. C Tenable Network Security, Inc. include"compat.inc"; if...

Microsoft Server Message Block vulnerable to buffer overflow

Overview Microsoft Server Message Block SMB is vulnerable to a buffer handling flaw when processing incoming SMB packets that may lead to remote code execution. Description Server Message Block is a protocol which allows sharing of files, printers, serial ports, and other abstractions. The SMB...

security flaw

Multiple unknown vulnerabilities in the 1 TZSP, 2 MGCP, 3 ISUP, 4 SMB, or 5 Bittorrent dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service segmentation fault via unknown vectors...

[Full-disclosure] Computer Associates Vet Antivirus Library Remote Heap Overflow

Date May 23, 2005 Vulnerability Computer Associates Vet library provides antivirus scan engine capabilities. Vet scan engines allow products to analyze various streams for malware. Vet is vulnerable to an integer wrap during the analysis of an OLE stream. The integer wrap causes an arbitrary heap...

Ethereal 0.10.10 - 'dissect_ipc_state' Remote Denial of Service

// / / / Ethereal / / / / From the Ethereal Security Advisory 19 : / / http://www.ethereal.com/appnotes/enpa-sa-00019.html / / / / "The SMB dissector could cause a segmentation fault and throw / / assertions. Versions affected: 0.9.0 to 0.10.10" / / / // include include include include include...

CVE-2005-1468

CVE-2005-1468 affects Ethereal (before 0.10.11) where multiple dissectors (including WSP, Q.931, H.245, KINK, MGCP, RPC, SMBMailslot, SMB NETLOGON, and others) may crash the analyzer via crafted network traffic, causing a denial of service due to a null dereference. Multiple advisories (RHSA-2005...

CVE-2005-1470

Multiple unknown vulnerabilities in the 1 TZSP, 2 MGCP, 3 ISUP, 4 SMB, or 5 Bittorrent dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service segmentation fault via unknown vectors...

CVE-2005-1459

Ethereal (now Wireshark) has multiple remote‑code-execution/denial of service vulnerabilities in its dissectors (WSP, BER, SMB, NDPS, IAX2, RADIUS, TCAP, MRDISC, 802.3 Slow, SMBMailslot, SMB PIPE) prior to version 0.10.11. The CVE set CVE-2005-1456 through CVE-2005-1470 is cited for these issues....

APG Classmaster Workstation Windows SMB share access vulnerability

Greetings, This vulnerability affects I believe all APG Classmaster Workstation versions. It remains a problem as an attacker can access shares with full permissions over a LAN. An attackers needs to issue a simple command in an MSDOS prompt using the net windows application, mapping an account t...

[SA14808] Windows Server 2003 Local Denial of Service Vulnerabilities

---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: Windows Server 2003 Local Denial of Service...