618 matches found
Nmap NSE net: smb-os-discovery
Attempts to determine the operating system, computer name, domain, and current time over the SMB protocol ports 445 or 139. This is done by starting a session with the anonymous account or with a proper user account, if one is given; it likely doesn't make a difference; in response to a session...
Re: [DSECRG-11-018] Kaspersky administration Kit - Remote code execution via SMBRelay
It was closed only for relayng to the same host but it is imposible to close relayng on another host which run processes st the same account. And also smbrelay patch did not work on clusters http://dsecrg.blogspot.com/2011/01/passthehash-bible-1-attacking.html...
Microsoft SMB Client Crafted Response Parsing Code Execution (MS11-019; CVE-2011-0660)
The SMB Protocol is a network file sharing protocol that is implemented in Microsoft Windows. A remote code execution vulnerability has been reported in the way that the Microsoft Server Message Block SMB client validates specially crafted SMB responses. The vulnerability is due to an error in th...
Microsoft SMB Crafted Write Request Remote Code Execution (MS11-020; CVE-2011-0661)
SMB Protocol is the file sharing protocol used by default on Windows-based computers. A remote code execution vulnerability has been reported in the way that Microsoft Server Message Block SMB Protocol software handles specially crafted SMB packets. The vulnerability is due to a pool corruption...
Brute Force Scanning of CIFS Ports
CIFS is an extension to the Message Block Server SMB protocol, a network protocol native to Windows systems which allows sharing of files and printers across a network. By trying to repeatedly authenticate to a SMB connected server using different passwords, it is possible to crack user accounts ...
New SMB Bug Found in All Versions of Windows
Researchers have identified a new remotely exploitable vulnerability in all current versions of Windows that could be used by attackers to run arbitrary code on vulnerable machines. There is already a proof-of-concept exploit in circulation for the bug. The new bug lies in the BROWSER protocol,...
Microsoft SMB Invalid Write Mode Evasion Technique
The SMB Protocol is a network file sharing protocol that is implemented in Microsoft Windows. There are many known vulnerabilities in applications based on the SMB protocol. Though IDS and IPS devices have signatures to detect attacks exploiting these vulnerabilities, these devices can be evaded...
Nmap NSE: SMB Enum Shares
This script attempts to list the shares on a Windows system over the SMB protocol. This is a wrapper on the Nmap Security Scanner's http://nmap.org smb-enum-shares.nse. OpenVAS Vulnerability Test $Id: gbnmapsmbenumshares.nasl 7006 2017-08-25 11:51:20Z teissa $ Wrapper for Nmap SMB Enum Shares NSE...
Nmap NSE: SMB OS Discovery
This script attempts to determine the operating system, computer name, domain, and current time over the SMB protocol. This is a wrapper on the Nmap Security Scanner's http://nmap.org smb-os-discovery.nse OpenVAS Vulnerability Test $Id: gbnmapsmbosdiscovery.nasl 7006 2017-08-25 11:51:20Z teissa $...
Microsoft Windows SMB Code Execution and DoS Vulnerabilities (982214)
This host is missing a critical security update according to Microsoft Bulletin MS10-054. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Microsoft SMB Server Pool Overflow Remote Code Execution (MS10-054; CVE-2010-2550)
The SMB Protocol is a network file sharing protocol that is implemented in Microsoft Windows. A remote code execution vulnerability has been reported in the Microsoft Windows Server Message Block SMB implementation. The vulnerability is due to insufficient validation by the Microsoft SMB Protocol...
Microsoft Windows SMB Pool Overflow Remote Code Execution Vulnerability
Description Microsoft Windows is prone to a remote code-execution vulnerability that affects the Microsoft Server Message Block SMB protocol software. A remote attacker can exploit this issue to execute code with SYSTEM-level privileges. Failed exploit attempts will likely cause denial-of-service...
Microsoft SMB Server Variable Validation Denial of Service (MS10-054; CVE-2010-2551)
The SMB Protocol is a network file sharing protocol that is implemented in Microsoft Windows. A denial of service vulnerability has been reported in the Microsoft Windows Server Message Block SMB implementation. The vulnerability is due to insufficient validation by the Microsoft SMB Protocol...
Microsoft Windows SMB Stack Exhaustion Denial of Service Vulnerability
Description Microsoft Windows is prone to a denial-of-service vulnerability that affects the Microsoft Server Message Block SMB protocol software. A remote attacker can exploit this issue to stop the affected system from responding, resulting in denial-of-service conditions. Technologies Affected...
Microsoft SMB Stack Exhaustion Denial of Service (MS10-054; CVE-2010-2552)
The SMB Protocol is a network file sharing protocol that is implemented in Microsoft Windows. A denial of service vulnerability has been reported in the Microsoft Windows Server Message Block SMB implementation. The vulnerability is due to insufficient validation by the Microsoft SMB Protocol...
Samba 3.4.73.5.1 - Denial of Service
Samba 3.4.73.5.1 - Denial of Service =============================================================================== stratsec Security Advisory: SS-2010-005 =============================================================================== Title: Samba Multiple DoS Vulnerabilities Version: 1.0 Issue...
Microsoft Windows 72008 R2 - SMB Client Trans2 Stack Overflow (MS10-020) (PoC)
Microsoft Windows 72008 R2 - SMB Client Trans2 Stack Overflow MS10-020 PoC import sys,SocketServer Windows 7/2008R2 SMB Client Trans2 stack overflow MS10-020 Date: 17/04/10 Author: Laurent Gaffié Tested on: Windows 7/2008R2 CVE: CVE-2010-0270 Full advisory:...
Microsoft SMB Client Memory Allocation Memory Corruption (MS10-020; CVE-2010-0269)
The SMB Protocol is a network file sharing protocol that is implemented in Microsoft Windows. A elevation of privilege vulnerability has been reported in the Microsoft Windows Server Message Block SMB client implementation. The vulnerability is due to an error in the Microsoft SMB client...
Microsoft SMB Client Message Size Remote Code Execution (MS10-020; CVE-2010-0477)
The SMB Protocol is a network file sharing protocol that is implemented in Microsoft Windows. A remote code execution vulnerability has been reported in the Microsoft Windows Server Message Block SMB client implementation. The vulnerability is due to an error in the Microsoft SMB client...
Microsoft SMB Client Response Parsing Memory Corruption (MS10-020; CVE-2010-0476)
The SMB Protocol is a network file sharing protocol that is implemented in Microsoft Windows. A remote code execution vulnerability has been reported in the Microsoft Windows Server Message Block SMB client implementation. The vulnerability is due to an error in the Microsoft SMB client...