Microsoft WMI Administrative Tools WBEMSingleView.ocx ActiveX control vulnerability

Overview The ActiveX control, WBEMSingleView.ocx, that is a part of the WMI Administrative Tools package contains a vulnerability. Description The AddContextRef and ReleaseContext functions of the WMI Object Viewer control can be passed an object pointer from an attacker that results in arbitrary...

Microsoft WMI Administrative Tool ActiveX Control Vulnerability

US-CERT is aware of a vulnerability affecting the WBEMSingleView.ocx ActiveX control. This control is part of the Microsoft WMI Administrative Tools package. Exploitation of this vulnerability may allow an attacker to execute arbitrary code. US-CERT encourages users and administrators to set the...

Microsoft WMI Administration Tools ActiveX Buffer Overflow

This module exploits a memory trust issue in the Microsoft WMI Administration tools ActiveX control. When processing a specially crafted HTML page, the WEBSingleView.ocx ActiveX Control 1.50.1131.0 will treat the 'lCtxHandle' parameter to the 'AddContextRef' and 'ReleaseContext' methods as a...

WMI Encryptable Volume Enumeration

Binary data wmienumencryptablevolumes.nbin...

Last Username (Windows)

The script detects if Last Login Username an Loginwarning is displayed. OpenVAS Vulnerability Test $Id: GSHBWMILoginscreen.nasl 7067 2017-09-06 11:50:33Z teissa $ Last username Windows Authors: Thomas Rotter Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net Set in an...

Last Username - Windows

The script detects if Last Login Username an Loginwarning is displayed. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MS10-061 Microsoft Print Spooler Service Impersonation Vulnerability

This module exploits the RPC service impersonation vulnerability detailed in Microsoft Bulletin MS10-061. By making a specific DCE RPC request to the StartDocPrinter procedure, an attacker can impersonate the Printer Spooler service to create a file. The working directory at the time is...

IT-Grundschutz M4.040: Verhinderung der unautorisierten Nutzung des Rechnermikrofons

IT-Grundschutz M4.040: Verhinderung der unautorisierten Nutzung des Rechnermikrofons. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.94203 Diese Prüfung bezieht sich a...

IT-Grundschutz M4.040: Verhinderung der unautorisierten Nutzung des Rechnermikrofons

IT-Grundschutz M4.040: Verhinderung der unautorisierten Nutzung des Rechnermikrofons. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.94203 Diese Prüfung bezieht sich a...

CVE-2010-1607

CVE-2010-1607 is a directory traversal (local file inclusion) vulnerability in the Webmoney Web Merchant Interface (com_wmi) Joomla! component 1.5.0. The issue allows exploitation by remote attackers who supply a .. in the controller parameter to index.php to cause inclusion and execution of arbi...

Checks InternetExplorer Policy for Protected Mode over WMI (Windows)

Checks InternetExplorer Policy for Protected Mode over WMI. OpenVAS Vulnerability Test $Id: GSHBWMIProtectedMode.nasl 7061 2017-09-05 11:50:40Z teissa $ Checks InternetExplorer Policy for Protected Mode over WMI Windows Authors: Thomas Rotter Copyright: Copyright c 2010 Greenbone Networks GmbH,...

Checks XP Internetcommunication of some Programs (Windows)

The script Checks XP Internetcommunication of some Programs: Internet Explorer Windows Media Player Windows Messenger Windows Zeitdienst Hilfe- und Supportcenter Windows Update Gerätemanager Windows Aktivierung und Registrierung Aktualisierung der Stammzertifikate Ereignisanzeige Webdienst...

Windows Path Variable over WMI (win)

Read the Windows System Path Varibles over WMI. OpenVAS Vulnerability Test $Id: GSHBWMIPathVariables.nasl 7279 2017-09-26 13:40:36Z cfischer $ Windows Path Variable over WMI win Authors: Thomas Rotter Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net Set in an Workgrou...

Read all Windows Policy Security Settings (Windows)

The script read all Windows Policy Security Settings. OpenVAS Vulnerability Test $Id: GSHBWMIPolSecSet.nasl 7061 2017-09-05 11:50:40Z teissa $ Read all Windows Policy Security Settings Windows Authors: Thomas Rotter Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net Set...

Tests if all Registry entrys set to prevent SYN-Attacks at an IIS Server (win)

Tests if all Registry entrys set to prevent SYN-Attacks at an IIS Server. OpenVAS Vulnerability Test $Id: GSHBWMIIISProtectSynAttack.nasl 7061 2017-09-05 11:50:40Z teissa $ Tests if all Registry entrys set to prevent SYN-Attacks at an IIS Server win Authors: Thomas Rotter Copyright: Copyright c...

Get all Windows non System Services, Service start modes and Eventlog Servicestate over WMI (win)

Get all Windows non System Services, Service start modes and Eventlog Servicestate over WMI. OpenVAS Vulnerability Test $Id: GSHBWMIlistServices.nasl 7061 2017-09-05 11:50:40Z teissa $ Get all Windows non System Services, Service start modes and Eventlog Servicestate over WMI win Authors: Thomas...

Read all EventLog Config Policy (ELCP) Settings - Windows

The script read all, Vista and above, EventLog Config Policy Settings. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Tests if all Registry entries set to prevent SYN-Attacks at an IIS Server - Windows

Tests if all Registry entries set to prevent SYN-Attacks at an IIS Server. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Test if passfilt.dll is installed - Windows

Test over WMI if passfilt.dll is installed and the necessary registry entry set. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Check over WMI if Apache is installed - Windows

Check over WMI if Apache is installed and report the path and version of the installation. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...