42 matches found
CVE-2013-3862
Double free vulnerability in Microsoft Windows 7 and Server 2008 R2 SP1 allows local users to gain privileges via a crafted service description that is not properly handled by services.exe in the Service Control Manager SCM, aka "Service Control Manager Double Free Vulnerability."...
MS Windows Service Control Manager Privilege Elevation Vulnerability (2872339)
This host is missing an important security update according to Microsoft Bulletin MS13-077. OpenVAS Vulnerability Test $Id: secpodms13-077.nasl 5346 2017-02-19 08:43:11Z cfi $ MS Windows Service Control Manager Privilege Elevation Vulnerability 2872339 Authors: Antu Sanadi Copyright: Copyright c...
MS13-077: Vulnerability in Windows Service Control Manager Could Allow Elevation of Privilege (2872339)
The remote Windows host is potentially affected by a privilege escalation vulnerability in the Windows Service Control Manager. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid69836; scriptversion"1.11"; scriptcvsdate"Date: 2019/11/27"; scriptcveid"CVE-2013-3862";...
MS13-077: Vulnerability in Windows Service Control Manager could allow elevation of privilege: September 10, 2013
Resolves a vulnerability in Windows Service Control Manager that could allow elevation of privilege if an authenticated user is convinced to execute a specially crafted application.INTRODUCTIONMicrosoft has released security bulletin MS13-077. To view the complete security bulletin, go to one of...
Microsoft Windows Service Control Manager CVE-2013-3862 Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability that exists in the Windows Service Control Manager SCM. An attacker can exploit this issue to execute arbitrary code with escalated privileges. Successfully exploiting this issue can lead to the complete compromi...
Squid SNMP Parser ASN.1 Header Parsing Denial of Service (CVE-2004-0918)
Squid is a full featured, open source web proxy caching server. It supports proxying FTP, HTTP, SSL, DNS and has support for Simple Network Management Protocol SNMP. There is a vulnerability in the way Squid web proxy parses SNMP messages. An SNMP message with specially crafted ASN.1 length field...
iDefense Security Advisory 10.14.08: Microsoft Host Integration Server 2006 Command Execution Vulnerability
iDefense Security Advisory 10.14.08 http://labs.idefense.com/intelligence/vulnerabilities/ Oct 14, 2008 I. BACKGROUND The Host Integration Server is an application suite that is used to communicate with IBM mainframe servers. One of the components of the suite is a remote management interface. Th...
Windows Access Control Demystified
Hello everybody, We have constructed a logical model of Windows XP access control, in a declarative but executable Datalog format. We have built a scanner that reads access-control configuration information from the Windows registry, file system, and service control manager database, and feeds ra...
Race in XP SCM Service Shutdown Mechanism
Race Condition in Windows XP Service Control Manager Service Shutdown Mechanism ABSTRACT "The Windows XP Professional operating system is the best choice for businesses of all sizes. Windows XP Professional integrates the strengths of Windows 2000 Professional, such as standards-based security,...
Microsoft Windows 2000 Service Control Manager creates predictably named pipes
Overview A vulnerability exists in the Microsoft Windows 2000 Service Control Manager which could allow local users to gain control of the system. Description A vulnerability exists in the Service Control Manager SCM function. This function creates named pipes for system services. More informatio...
CVE-2000-0737
The Service Control Manager SCM in Windows 2000 creates predictable named pipes, which allows a local user with console access to gain administrator privileges, aka the "Service Control Manager Named Pipe Impersonation" vulnerability...
CVE-2000-0737
The Service Control Manager SCM in Windows 2000 creates predictable named pipes, which allows a local user with console access to gain administrator privileges, aka the "Service Control Manager Named Pipe Impersonation" vulnerability...
MS00-053: Service Control Manager Named Pipe Impersonation patch (269523)
The hotfix for the 'Service Control Manager Named Pipe Impersonation' problem has not been applied. This vulnerability allows a malicious user, who has the right to log on this host locally, to gain additional privileges. C Tenable Network Security, Inc. include"compat.inc"; if description...
Security Bulletin (MS00-053)
Microsoft Security Bulletin MS00-053 - -------------------------------------- Patch Available for "Service Control Manager Named Pipe Impersonation" Vulnerability Originally posted: August 02, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in Microsof...
Microsoft Windows Server 2000 - Named Pipes Predictability
source: https://www.securityfocus.com/bid/1535/info The Service Control Manager SCM is an administrative tool in Windows 2000 which handles the creation and modification of system services such as Server, Workstation, Alerter, and ClipBook. A server-side named pipe is created before each service ...
CVE-1999-0980
Windows NT Service Control Manager SCM allows remote attackers to cause a denial of service via a malformed argument in a resource enumeration request...
CVE-1999-0980
CVE-1999-0980 affects the Windows NT Service Control Manager (SCM). A remote attacker can cause a denial-of-service by sending a malformed argument in a resource-enumeration request, impacting availability (base score ~5.0, network vector, low complexity; no confidentiality or integrity impact st...
CVE-1999-0886
Technical details for CVE-1999-0886 are not publicly provided in the supplied documents. Monitor for updates. The records note a RASMAN security descriptor issue enabling an alternate location via the Windows NT Service Control Manager.