1078 matches found
CVE-2005-3173
Microsoft Windows 2000 before Update Rollup 1 for SP4 does not apply group policies if the user logs on using UPN credentials with a trailing dot, which prevents Windows 2000 from finding the correct domain controller and could allow the user to bypass intended restrictions...
CVE-2005-3174
Microsoft Windows 2000 before Update Rollup 1 for SP4 allows users to log on to the domain, even when their password has expired, if the fully qualified domain name FQDN is 8 characters long...
CVE-2005-3170
The LDAP client on Microsoft Windows 2000 before Update Rollup 1 for SP4 accepts certificates using LDAP Secure Sockets Layer LDAPS even when the Certificate Authority CA is not trusted, which could allow attackers to trick users into believing that they are accessing a trusted site...
CVE-2005-3177
CHKDSK in Microsoft Windows 2000 before Update Rollup 1 for SP4, Windows XP, and Windows Server 2003, when running in fix mode, does not properly handle security descriptors if the master file table contains a large number of files or if the descriptors do not satisfy certain NTFS conventions,...
CVE-2005-3168
The SECEDIT command on Microsoft Windows 2000 before Update Rollup 1 for SP4, when using a security template to set Access Control Lists ACLs on folders, does not apply ACLs on folders that are listed after a long folder entry, which could result in less secure permissions than specified by the...
CVE-2005-3176
Microsoft Windows 2000 before Update Rollup 1 for SP4 does not record the IP address of a Windows Terminal Services client in a security log event if the client connects successfully, which could make it easier for attackers to escape detection...
CVE-2005-3177
Affected software : Microsoft Windows 2000 (before Update Rollup 1 for SP4), Windows XP, and Windows Server 2003. Vulnerable component : CHKDSK running in fix mode. Root cause : CHKDSK does not properly handle security descriptors when the master file table contains a large number of files or whe...
CVE-2005-3171
CVE-2005-3171 affects Microsoft Windows 2000 before Update Rollup 1 for SP4. The issue occurs when Event ID 1704 is recorded to indicate that Group Policy security settings were updated, even if the processing fails (for example, Ntuser.pol cannot be accessed). This may cause administrators to be...
CVE-2005-3170
CVE-2005-3170 affects Microsoft Windows 2000 prior to Update Rollup 1 for SP4. The LDAP client accepts LDAPS certificates even when the CA is not trusted, enabling attackers to mislead users into thinking they are on a trusted site. No exploitation details are provided in the sources. Remediation...
Microsoft Windows 2000 SP4 Update Rollup 1 Missing
The remote host is missing the Update Rollup 1 URP1 for Windows 2000 SP4. This update rollup contains several security fixes in addition to previously released security patches. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid18592; scriptversion"1.18";...
Microsoft Windows SMB Service Enumeration via \srvsvc
This plugin connects to \srvsvc instead of \svcctl to enumerate the list of services running on the remote host on top of a NULL session. An attacker may use this feature to gain better knowledge of the remote host. C Tenable Network Security, Inc. Thanks to: Jean-Baptiste Marchand of Herve Schau...
Update Rollup for Microsoft Monitoring Agent (KB4015075)
Update Rollup for Microsoft Monitoring Agent KB4015075...
Update Rollup 13 for Exchange Server 2010 Service Pack 3 (KB3141339)
Update Rollup 13 for Exchange Server 2010 Service Pack 3 KB3141339...
Update Rollup 5 for Microsoft System Center 2019 - Operations Manager WebConsole (KB5025123)
Update Rollup 5 for Microsoft System Center 2019 - Operations Manager WebConsole KB5025123...
Update Rollup for Lync Server 2013 Conferencing Server (KB3140584)
Update Rollup for Lync Server 2013 Conferencing Server KB3140584...
Update Rollup for Lync Server 2013 Core Components (KB3140581)
Update Rollup for Lync Server 2013 Core Components KB3140581...
Update Rollup 7 for System Center 2012 R2 - Data Protection Manager (KB3065246)
Update Rollup 7 for System Center 2012 R2 - Data Protection Manager KB3065246...
Update Rollup 18 for Exchange Server 2007 Service Pack 3 (KB3078672)
Update Rollup 18 for Exchange Server 2007 Service Pack 3 KB3078672...