Microsoft WINS Local Elevation of Privilege (MS11-070; CVE-2011-1984)

An elevation of privilege vulnerability has been reported in Microsoft WINS. A local attacker could exploit this vulnerability to execute arbitrary code in an affected local system. The vulnerability is due to an error in the way WINS server processes a sequence of specially crafted packets...

Microsoft Windows WINS Server 'ECommEndDlg()'本地特权提升漏洞

Bugtraq ID: 49523 CVE ID：CVE-2011-1984 Microsoft Windows是一款流行的操作系统。 Microsoft Windows WINS存在安全漏洞，如果用户在运行WINS服务，受此漏洞影响的系统上接收到特制WINS复制报文，这个漏洞可允许特权提升。攻击者必须拥有合法登录凭证，本地利用此漏洞。 恶意报文会由MS11-035中报告的ECommEndDlg函数处理，但这次函数处理的指针由攻击者控制。 向WINS服务绑定在回路地址127.0.0.1的动态UDP端口发送特制报文可触发此漏洞。在老的win 2003...

WINS Server Detection

The remote service is a WINS Windows Internet Name Service server, which holds information about any NetBIOS-enabled hosts on the network. Note that the service may allow an arbitrary user to download the list, although some versions eg, in Windows 2008 require an IP address to be specifically...

Simple Network penetration spying on a command-vulnerability warning-the black bar safety net

ipconfig /all //You can view the current network card configuration information, including the domain and IP section This command can be seen: the host name---shwdm, IP--192.168.103.8, the gateway IP---192.168.103.10,DNS domain name resolution IP address---192.168.100.1 to an primary WINS server...

Microsoft Windows WINS Server网络报文堆溢出漏洞（MS09-039）

BUGTRAQ ID: 35980 CVECAN ID: CVE-2009-1923 Microsoft Windows是微软发布的非常流行的操作系统。 Windows服务器上的WINS.exe进程用于为NetBIOS网络提供名称解析服务。在解析push请求时WINS服务将报文数据拷贝到了静态的堆缓冲区上。如果远程攻击者提供了特制的请求，就可以触发堆溢出，导致以SYSTEM权限执行任意代码。 Microsoft Windows Server 2003 SP2 Microsoft Windows 2000 Server SP4 临时解决方法： 在防火墙上屏蔽TCP 42和UDP 42端口。...

MS09-039: Vulnerabilities in WINS Could Allow Remote Code Execution (969883) (uncredentialed check)

The remote host has a Windows WINS server installed. The remote version of this server has two vulnerabilities that may allow an attacker to execute arbitrary code on the remote system: - One heap overflow vulnerability can be exploited by any attacker. - One integer overflow vulnerability can be...

Microsoft Windows WINS Server网络报文整数溢出漏洞（MS09-039）

BUGTRAQ ID: 35981 CVECAN ID: CVE-2009-1924 Microsoft Windows是微软发布的非常流行的操作系统。 Windows服务器上的WINS.exe进程用于为NetBIOS网络提供名称解析服务。在从受信任的WINS复制伙伴收到特制WINS报文中时没有充分验证数据结构，如果远程攻击者提供了特制的请求，就可以触发整数溢出，导致以SYSTEM权限执行任意代码。 Microsoft Windows 2000 Server SP4 临时解决方法： 在防火墙上屏蔽TCP 42和UDP 42端口。 厂商补丁： Microsoft ---------...

Microsoft Windows WINS Server Network Packet Remote Heap Buffer Overflow Vulnerability

Description The Microsoft Windows WINS Server is prone to a remote heap-based buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. An attacker can exploit this issue to execute arbitrary code with SYSTEM-level privileges...

Microsoft Windows WINS Server Network Buffer Length Integer Overflow Vulnerability

Description The Microsoft Windows WINS Server is prone to a remote integer-overflow vulnerability. An attacker can exploit this issue to execute arbitrary code with SYSTEM-level privileges. Successful exploits will completely compromise affected computers. Failed exploit attempts will result in a...

Mandriva Update for samba MDKSA-2007:224 (samba)

Check for the Version of samba OpenVAS Vulnerability Test Mandriva Update for samba MDKSA-2007:224 samba Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

CVE-2009-0094

The WINS server in Microsoft Windows 2000 SP4 and Server 2003 SP1 and SP2 does not restrict registration of the 1 "wpad" and 2 "isatap" NetBIOS names, which allows remote authenticated users to hijack the Web Proxy Auto-Discovery WPAD and Intra-Site Automatic Tunnel Addressing Protocol ISATAP...

Design/Logic Flaw

The WINS server in Microsoft Windows 2000 SP4 and Server 2003 SP1 and SP2 does not restrict registration of the 1 "wpad" and 2 "isatap" NetBIOS names, which allows remote authenticated users to hijack the Web Proxy Auto-Discovery WPAD and Intra-Site Automatic Tunnel Addressing Protocol ISATAP...

CVE-2009-0094

The WINS server in Microsoft Windows 2000 SP4 and Server 2003 SP1 and SP2 does not restrict registration of the 1 "wpad" and 2 "isatap" NetBIOS names, which allows remote authenticated users to hijack the Web Proxy Auto-Discovery WPAD and Intra-Site Automatic Tunnel Addressing Protocol ISATAP...

CVE-2009-0094

This CVE describes WPAD/ISATAP spoofing via WINS/DNS server vulnerabilities in Windows 2000 SP4 and Windows Server 2003 SP1/SP2. The root cause is lack of restrictions on registering WPAD/ISATAP names in WINS (and WPAD in DNS in related entries), enabling remote authenticated actors to hijack WPA...

WINS Server Detection

Binary data 4955.prm...

Microsoft Windows WINS Server WPAD and ISATAP Access Validation Vulnerability

Description The Microsoft Windows WINS Server is prone to an access-validation vulnerability because the software fails to properly restrict access when defining WPAD Web Proxy Autodiscovery Protocol and ISATAP Intra-Site Automatic Tunnel Addressing Protocol entries. An authenticated attacker may...

Microsoft WINS Server WPAD Registration Spoofing (MS09-008; CVE-2009-0094)

The Web Proxy Auto-Discovery WPAD feature enables web clients to automatically detect proxy settings without user intervention. A WPAD registration spoofing vulnerability has been reported in Microsoft WINS servers. The vulnerability is due to an error in the Windows WINS server that fails to...

Microsoft Security Bulletin MS09-008 – Important Vulnerabilities in DNS and WINS Server Could Allow Spoofing (962238)

Microsoft Security Bulletin MS09-008 – Important Vulnerabilities in DNS and WINS Server Could Allow Spoofing 962238 Published: March 10, 2009 Version: 1.0 General Information Executive Summary This security update resolves two privately reported vulnerabilities and two publicly disclosed...

Immunity Canvas: MS08_034

Name| ms08034 ---|--- CVE| CVE-2008-1451 Exploit Pack| CANVAS Description| Microsoft WINS Server Vulnerability Notes| CVE Name: CVE-2008-1451 VENDOR: Microsoft MSADV: MS08-034 Repeatability: Infinite MSRC: http://www.microsoft.com/technet/security/Bulletin/MS08-034.mspx CVS URL:...

Microsoft Windows WINS Server Local Privilege Escalation Vulnerability

Description Microsoft Windows WINS server is prone to a local privilege-escalation vulnerability that may be triggered by malicious WINS network packets. Successful exploits allow local attackers to execute arbitrary code with SYSTEM-level privileges, completely compromising the affected computer...