samba: Spoofing vulnerability when domain controller is configured

It was discovered that Samba configured as a Domain Controller would establish a secure communication channel with a machine using a spoofed computer name. A remote attacker able to observe network traffic could use this flaw to obtain session-related information about the spoofed machine...

Network Time Protocol ntpq Control Protocol Replay Vulnerability

CERT VU357792 Summary The ntpq protocol is vulnerable to replay attacks. The sequence number being included under the signature fails to prevent replay attacks for two reasons. Commands that don’t require authentication can be used to move the sequence number forward, and NTP doesn’t actually car...

Microsoft Windows Schannel Remote Code Execution - Ver2 (CVE-2014-6321)

A code execution vulnerability has been reported in Secure Channel Schannel security package. An attacker could exploit this vulnerability by sending specially crafted packets to a Windows server. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary cod...

Microsoft Secure Channel Man-in-the-Middle Security Bypass Vulnerability

Microsoft Windows is a popular operating system. Microsoft Secure Channel in Windows fails to properly restrict tls state transitions, allowing attackers to exploit vulnerabilities to submit special tls communications for freak attacks that can drop the encryption level to exportrsa encryption,...

CVE-2015-0005

The NETLOGON service in Microsoft Windows Server 2003 SP2, Windows Server 2008 SP2 and R2 SP1, and Windows Server 2012 Gold and R2, when a Domain Controller is configured, allows remote attackers to spoof the computer name of a secure channel's endpoint, and obtain sensitive session information, ...

MS14-066: Vulnerability in Schannel Could Allow Remote Code Execution (2992611) (uncredentialed check)

Binary data ms14-066.nbin...

Microsoft Windows Secure Channel Remote Code Execution Vulnerability (2992611)

This host is missing a critical security update according to Microsoft Bulletin MS14-066. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Secure Channel CVE-2014-6321 Remote Code Execution Vulnerability

Description Microsoft Secure Channel is prone to a remote code-execution vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the target server. Failed exploit attempts will result in denial-of-service conditions. Technologies Affected Avaya Aura...

KLA10601 Multiple vulnerabilities in Microsoft products

Multiple serious vulnerabilities have been found in Microsoft products. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service gain privileges, execute arbitrary code or obtain sensitive information. Below is a complete list of vulnerabilities 1...

OPC UA Close Secure Channel Request Command

...

OPC UA Open Secure Channel Response Command

...

OPC UA Open Secure Channel Request Command

...

OPC UA Close Secure Channel Response Command

...

CVE-2010-2566

The CVE-2010-2566 issue is a remote code execution vulnerability in Microsoft Windows SChannel (TLS/SSL) where the SChannel security package fails to properly validate certificate request messages from TLS/SSL servers. This affects Windows XP SP2/SP3 and Windows Server 2003 SP2. An attacker could...

[security bulletin] HPSBMA02201 SSRT071328 rev.1 - HP LoadRunner Agent on Windows, Remote Unauthenticated Arbitrary Code Execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c00912968 Version: 1 HPSBMA02201 SSRT071328 rev.1 - HP LoadRunner Agent on Windows, Remote Unauthenticated Arbitrary Code Execution NOTICE: The information in this Security Bulletin should be acte...

Fedora Update for openssh FEDORA-2007-395

Check for the Version of openssh OpenVAS Vulnerability Test Fedora Update for openssh FEDORA-2007-395 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Microsoft Windows Secure Channle DoS

Service hangs on SSL/TLS handshake parsing...

CVE-2005-3402

The SMTP client in Mozilla Thunderbird 1.0.5 BETA, 1.0.7, and possibly other versions, does not notify users when it cannot establish a secure channel with the server, which allows remote attackers to obtain authentication information without detection via a man-in-the-middle MITM attack that...

CVE-2004-0870

KDE Konqueror does not prevent cookies that are sent over an insecure channel HTTP from also being sent over a secure channel HTTPS/SSL in the same domain, which could allow remote attackers to steal cookies and conduct unauthorized activities, aka "Cross Security Boundary Cookie Injection."...

CVE-2004-0872

Opera does not prevent cookies that are sent over an insecure channel HTTP from also being sent over a secure channel HTTPS/SSL in the same domain, which could allow remote attackers to steal cookies and conduct unauthorized activities, aka "Cross Security Boundary Cookie Injection."...