Microsoft WINS - Service Memory Overwrite (MS04-045) (Metasploit)

$Id: ms04045wins.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Microsoft WINS Denial Of Service (CVE-2003-0825)

The Windows Internet Name Service WINS provides a distributed database for the registering and querying of dynamic mappings of NetBIOS names to IP addresses. A WINS server accepts registration requests from hosts on the network and stores the received information in its database. There exists a...

Simple Network penetration spying on a command-vulnerability warning-the black bar safety net

ipconfig /all //You can view the current network card configuration information, including the domain and IP section This command can be seen: the host name---shwdm, IP--192.168.103.8, the gateway IP---192.168.103.10,DNS domain name resolution IP address---192.168.100.1 to an primary WINS server...

Microsoft WINS Service Memory Overwrite

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Microsoft WI...

Microsoft Windows WINS Remote Code Execution Vulnerability (969883)

This host is missing a critical security update according to Microsoft Bulletin MS09-039. OpenVAS Vulnerability Test $Id: secpodms09-039.nasl 5363 2017-02-20 13:07:22Z cfi $ Microsoft Windows WINS Remote Code Execution Vulnerability 969883 Authors: Sharath S Copyright: Copyright c 2009 SecPod,...

Microsoft Windows WINS Remote Code Execution Vulnerability (969883)

This host is missing a critical security update according to Microsoft Bulletin MS09-039. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Integer overflow

Integer overflow in the Windows Internet Name Service WINS component for Microsoft Windows 2000 SP4 allows remote WINS replication partners to execute arbitrary code via crafted data structures in a packet, aka "WINS Integer Overflow Vulnerability."...

Heap overflow

Heap-based buffer overflow in the Windows Internet Name Service WINS component for Microsoft Windows 2000 SP4 and Server 2003 SP2 allows remote attackers to execute arbitrary code via a crafted WINS replication packet that triggers an incorrect buffer-length calculation, aka "WINS Heap Overflow...

CVE-2009-1923

Heap-based buffer overflow in the Windows Internet Name Service WINS component for Microsoft Windows 2000 SP4 and Server 2003 SP2 allows remote attackers to execute arbitrary code via a crafted WINS replication packet that triggers an incorrect buffer-length calculation, aka "WINS Heap Overflow...

CVE-2009-1924

Integer overflow in the Windows Internet Name Service WINS component for Microsoft Windows 2000 SP4 allows remote WINS replication partners to execute arbitrary code via crafted data structures in a packet, aka "WINS Integer Overflow Vulnerability."...

CVE-2009-1923

A heap-based buffer overflow exists in the Windows Internet Name Service (WINS) component, specifically within the WINS.exe process, affecting Microsoft Windows 2000 SP4 and Server 2003 SP2 . The flaw is triggered during the parsing of a push request when the service copies packet data into a sta...

CVE-2009-1924

Integer overflow in the Windows Internet Name Service WINS component for Microsoft Windows 2000 SP4 allows remote WINS replication partners to execute arbitrary code via crafted data structures in a packet, aka "WINS Integer Overflow Vulnerability."...

CVE-2009-1924

The CVE-2009-1924 entry relates to an integer/heap overflow in Microsoft Windows WINS (NetBIOS name resolution). Affected product: Windows Server/Windows 2000 SP4 with WINS service. Vulnerability arises when processing crafted WINS replication packets, allowing remote code execution with SYSTEM p...

CVE-2009-1923

Heap-based buffer overflow in the Windows Internet Name Service WINS component for Microsoft Windows 2000 SP4 and Server 2003 SP2 allows remote attackers to execute arbitrary code via a crafted WINS replication packet that triggers an incorrect buffer-length calculation, aka "WINS Heap Overflow...

Microsoft Windows WINS Server网络报文堆溢出漏洞（MS09-039）

BUGTRAQ ID: 35980 CVECAN ID: CVE-2009-1923 Microsoft Windows是微软发布的非常流行的操作系统。 Windows服务器上的WINS.exe进程用于为NetBIOS网络提供名称解析服务。在解析push请求时WINS服务将报文数据拷贝到了静态的堆缓冲区上。如果远程攻击者提供了特制的请求，就可以触发堆溢出，导致以SYSTEM权限执行任意代码。 Microsoft Windows Server 2003 SP2 Microsoft Windows 2000 Server SP4 临时解决方法： 在防火墙上屏蔽TCP 42和UDP 42端口。...

Microsoft WINS multiple security vulnerabilities

Integer overflow, heap buffer overflow...

MS09-039: Vulnerabilities in WINS Could Allow Remote Code Execution (969883) (uncredentialed check)

The remote host has a Windows WINS server installed. The remote version of this server has two vulnerabilities that may allow an attacker to execute arbitrary code on the remote system: - One heap overflow vulnerability can be exploited by any attacker. - One integer overflow vulnerability can be...

Microsoft Windows WINS Server网络报文整数溢出漏洞（MS09-039）

BUGTRAQ ID: 35981 CVECAN ID: CVE-2009-1924 Microsoft Windows是微软发布的非常流行的操作系统。 Windows服务器上的WINS.exe进程用于为NetBIOS网络提供名称解析服务。在从受信任的WINS复制伙伴收到特制WINS报文中时没有充分验证数据结构，如果远程攻击者提供了特制的请求，就可以触发整数溢出，导致以SYSTEM权限执行任意代码。 Microsoft Windows 2000 Server SP4 临时解决方法： 在防火墙上屏蔽TCP 42和UDP 42端口。 厂商补丁： Microsoft ---------...

MS09-039: Vulnerabilities in WINS Could Allow Remote Code Execution (969883)

The remote host has a Windows WINS server installed. The remote version of this server contains two vulnerabilities that may allow an attacker to execute arbitrary code on the remote system : - A heap overflow vulnerability can be exploited by any attacker. - A integer overflow vulnerability can ...

Microsoft WINS Buffer Length Heap Overflow (MS09-039; CVE-2009-1923)

Windows Internet Naming Service WINS was designed specifically to support NetBIOS over TCP/IP NetBT, and is required for any environment in which users access resources that have NetBIOS names. A remote code execution vulnerability has been discovered in Microsoft WINS. The vulnerability is due t...