PT-2017-1938

Name of the Vulnerable Software and Affected Versions microsoft server message block 1.0 Description The issue exists due to insufficient input validation in the SMBv1 protocol of the Microsoft Windows operating system. This allows a remote attacker to execute arbitrary code using specially craft...

PT-2017-1935

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description The issue exists due to insufficient input validation in the SMBv1 protocol of the Microsoft Windows operating system. This allows a remote attacker to execute arbitrary code using...

VulnCheck KEV: CVE-2017-0143

Microsoft Windows Server Message Block 1.0 SMBv1 contains an unspecified vulnerability that allows for remote code execution...

VulnCheck KEV: CVE-2017-0145

The SMBv1 server in multiple Microsoft Windows versions allows remote attackers to execute arbitrary code via crafted packets...

Microsoft Windows SMB Remote Code Execution (MS17-010: CVE-2017-0146)

A remote code execution vulnerability exist in Microsoft Server Message Block 1.0 SMBv1. The vulnerability is due to the way SMBv1 service handles certain requests. An attacker who successfully exploited the vulnerability could gain code execution on the target server...

VulnCheck KEV: CVE-2017-0147

The SMBv1 server in Microsoft Windows allows remote attackers to obtain sensitive information from process memory via a crafted packet...

KLA10977 Multiple vulnerabilities in Microsoft Server Message Block (SMB)

Multiple serious vulnerabilities have been found in Microsoft Server Message Block 1.0SMBv1. Malicious users can exploit these vulnerabilities to execute arbitrary code or obtain sensitive information. Below is a complete list of vulnerabilities: 1. An improper handling of certain requests can be...

Unpatched SMB Zero Day Easily Exploitable

In what’s turning out to be the zero day that keeps on giving, researchers are still finding ways to exploit an unpatched denial of service vulnerability that exists in the way Windows implements the Server Message Block protocol. Details around the bug aren’t a mystery. Laurent Gaffié, the...

GOsa Arbitrary Command Execution Vulnerability

GOsa is a set of LDAP front-end tools for managing users. A security vulnerability exists in the 'generatesmbnthash' function in the include/functions.inc file in GOsa. A remote attacker can exploit this vulnerability to execute arbitrary commands with the help of a specially crafted password...

Server Message Block (SMB) Protocol Version 1 Enabled

The remote Windows host supports Server Message Block Protocol version 1 SMBv1. Microsoft recommends that users discontinue the use of SMBv1 due to the lack of security features that were included in later SMB versions. Additionally, the Shadow Brokers group reportedly has an exploit that affects...

NetApp Clustered Data ONTAP Information Disclosure Vulnerability (CNVD-2017-01406)

NetApp Clustered Data ONTAP is a set of storage operating system for clustered mode from American NetApp. The system supports users to enhance the performance of enterprise applications and improve data center flexibility and so on. A security vulnerability exists in NetApp Clustered Data ONTAP...

UBUNTU-CVE-2017-5885

Multiple integer overflows in the 1 vncconnectionservermessage and 2 vnccolormapset functions in gtk-vnc before 0.7.0 allow remote servers to cause a denial of service crash or possibly execute arbitrary code via vectors involving SetColorMapEntries, which triggers a buffer overflow...

Microsoft Windows SMB Tree Connect Response Denial of Service Vulnerability

Microsoft Windows is a popular operating system. A security vulnerability exists in Microsoft Windows when processing SMB traffic. The vulnerability arises because Windows fails to properly handle the processing of a server response as defined in the SMB2 TREECONNECT response structure that...

Windows SMBv3 remote denial of service 0day vulnerabilities-vulnerability warning-the black bar safety net

GMT + 2 on 2 September, the foreign technology website Github exposure Windows SMBv3 the presence of remote attacks 0day vulnerability. According to the disclosure of the vulnerability the authentication code, The POC, the attacker can force the affected system to blue screen crash, this...

Microsoft Windows SMBv3 Denial of Service Vulnerability

SMB is a network file-sharing protocol that allows applications and end users to access file resources from a remote file server.Microsoft Windows is a popular operating system. A denial of service vulnerability exists in Microsoft Windows SMBv3. An attacker can launch a denial of service attack ...

Update to add the LiveDump capture feature to Windows Server 2012 R2

Update to add the LiveDump capture feature to Windows Server 2012 R2 About this update This update adds the LiveDump capture feature to Windows Server 2012 R2. This feature enables the Server Message Block SMB server to trigger a live kernel dump file to help you determine the root cause of issue...

CVE-2016-5492

Unspecified vulnerability in the Sun ZFS Storage Appliance Kit AK component in Oracle Sun Systems Products Suite AK 2013 allows local users to affect confidentiality and integrity via vectors related to SMB Users...

EMC Replication Manager and EMC Networker Module for Microsoft Remote Code Execution Vulnerability

EMC Replication Manager RM and so on are the products of the United States EMC EMC. RM is a set of EMC storage arrays in the data replication products provide an integrated management platform software; EMC Networker Module for Microsoft NMM is a set of Microsoft applications for the provision of...

Arbitrary Code Execution Vulnerability in Multiple EMC Products

EMC VNX2 File OE and others are hybrid storage platforms from EMC Corporation USA. A security vulnerability exists in the SMB server implementation of several EMC products, which can be exploited to execute arbitrary code and read or write files by sending a series of authentication requests...

Vulnerability of the Windows operating system, allowing a perpetrator to execute arbitrary code

The vulnerability of the SMBv1 server in Windows operating systems is related to access control deficiencies. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially crafted packets...