1080 matches found
CVE-2005-3169
CVE-2005-3169 affects Microsoft Windows 2000 prior to Update Rollup 1 for SP4 when the audit directory service access policy is enabled. The vulnerability is that a 565 event message for File Delete Child operations on Active Directory objects is not recorded in the security event log, potentiall...
CVE-2005-3171
CVE-2005-3171 affects Microsoft Windows 2000 before Update Rollup 1 for SP4. The issue occurs when Event ID 1704 is recorded to indicate that Group Policy security settings were updated, even if the processing fails (for example, Ntuser.pol cannot be accessed). This may cause administrators to be...
CVE-2005-3169
Microsoft Windows 2000 before Update Rollup 1 for SP4, when the "audit directory service access" policy is enabled, does not record a 565 event message for File Delete Child operations on an Active Directory object in the security event log, which could allow attackers to conduct unauthorized...
CVE-2005-3170
CVE-2005-3170 affects Microsoft Windows 2000 prior to Update Rollup 1 for SP4. The LDAP client accepts LDAPS certificates even when the CA is not trusted, enabling attackers to mislead users into thinking they are on a trusted site. No exploitation details are provided in the sources. Remediation...
CVE-2005-3173
Microsoft Windows 2000 before Update Rollup 1 for SP4 does not apply group policies if the user logs on using UPN credentials with a trailing dot, which prevents Windows 2000 from finding the correct domain controller and could allow the user to bypass intended restrictions...
CVE-2005-3171
Microsoft Windows 2000 before Update Rollup 1 for SP4 records Event ID 1704 to indicate that Group Policy security settings were successfully updated, even when the processing fails such as when Ntuser.pol cannot be accessed, which could cause system administrators to believe that the system is...
CVE-2005-3177
CHKDSK in Microsoft Windows 2000 before Update Rollup 1 for SP4, Windows XP, and Windows Server 2003, when running in fix mode, does not properly handle security descriptors if the master file table contains a large number of files or if the descriptors do not satisfy certain NTFS conventions,...
CVE-2005-3168
The SECEDIT command on Microsoft Windows 2000 before Update Rollup 1 for SP4, when using a security template to set Access Control Lists ACLs on folders, does not apply ACLs on folders that are listed after a long folder entry, which could result in less secure permissions than specified by the...
CVE-2005-3177
Affected software : Microsoft Windows 2000 (before Update Rollup 1 for SP4), Windows XP, and Windows Server 2003. Vulnerable component : CHKDSK running in fix mode. Root cause : CHKDSK does not properly handle security descriptors when the master file table contains a large number of files or whe...
Microsoft Windows 2000 SP4 Update Rollup 1 Missing
The remote host is missing the Update Rollup 1 URP1 for Windows 2000 SP4. This update rollup contains several security fixes in addition to previously released security patches. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid18592; scriptversion"1.18";...
Microsoft Windows SMB Service Enumeration via \srvsvc
This plugin connects to \srvsvc instead of \svcctl to enumerate the list of services running on the remote host on top of a NULL session. An attacker may use this feature to gain better knowledge of the remote host. C Tenable Network Security, Inc. Thanks to: Jean-Baptiste Marchand of Herve Schau...
Update Rollup 10 for System Center 2016 - Data Protection Manager (KB4578608)
Update Rollup 10 for System Center 2016 - Data Protection Manager KB4578608...
Update Rollup for Microsoft Monitoring Agent (KB4015075)
Update Rollup for Microsoft Monitoring Agent KB4015075...
Update Rollup 4 for System Center 2019 - Data Protection Manager (KB5014054)
Update Rollup 4 for System Center 2019 - Data Protection Manager KB5014054...
Update Rollup 17 for Exchange Server 2007 Service Pack 3 (KB3056710)
Update Rollup 17 for Exchange Server 2007 Service Pack 3 KB3056710...
Update Rollup 7 for System Center 2012 R2 - Data Protection Manager (KB3065246)
Update Rollup 7 for System Center 2012 R2 - Data Protection Manager KB3065246...
Update Rollup 19 for Exchange Server 2010 Service Pack 3 (KB4035162)
Update Rollup 19 for Exchange Server 2010 Service Pack 3 KB4035162...
Update Rollup for Microsoft Monitoring Agent (KB4015075)
Update Rollup for Microsoft Monitoring Agent KB4015075...