416 matches found
MS10-104 Microsoft Office SharePoint Server 2007 Remote Code Execution
This module exploits a vulnerability found in SharePoint Server 2007 SP2. The software contains a directory traversal, that allows a remote attacker to write arbitrary files to the filesystem, sending a specially crafted SOAP ConvertFile request to the Office Document Conversions Launcher Service...
Vulnerabilities in Windows Could Allow Elevation of Privilege (959454)
This host is missing a critical security update according to Microsoft Bulletin MS09-012. OpenVAS Vulnerability Test $Id: secpodms09-012.nasl 5934 2017-04-11 12:28:28Z antu123 $ Vulnerabilities in Windows Could Allow Elevation of Privilege 959454 Authors: Chandan S Updated By: Madhuri D on...
PT-2009-2778 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions prior to the fixed version Description: The issue arises from the Windows Management Instrumentation WMI provider not properly isolating processes running under the NetworkService or LocalService accounts. This coul...
CVE-2009-0078: Undefined Security Weakness
The Windows Management Instrumentation WMI provider in Microsoft Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 does not properly implement isolation among a set of distinct processes that 1 all run under the NetworkService account or 2 all run under the...
Black Ice Cover Page ActiveX Control Arbitrary File Download
This module allows remote attackers to place arbitrary files on a users file system by abusing the "DownloadImageFileURL" method in the Black Ice BIImgFrm.ocx ActiveX Control BIImgFrm.ocx 12.0.0.0. Code execution can be achieved by first uploading the payload to the remote machine, and then uploa...
VulnCheck KEV: CVE-2006-4704
Cross-zone scripting vulnerability in the WMI Object Broker WMIScriptUtils.WMIObjectBroker2 ActiveX control WmiScriptUtils.dll in Microsoft Visual Studio 2005 allows remote attackers to bypass Internet zone restrictions and execute arbitrary code by instantiating dangerous objects, aka "WMI Objec...
iDefense Security Advisory 12.14.05: Trend Micro ServerProtect relay.dll Chunked Overflow Vulnerability
Trend Micro ServerProtect relay.dll Chunked Overflow Vulnerability iDefense Security Advisory 12.14.05 www.idefense.com/application/poi/display?id=354&type=vulnerabilities December 14, 2005 I. BACKGROUND Trend Micro Inc.'s ServerProtect provides antivirus scanning with centralized management of...
CVE-2005-1792
Memory leak in Windows Management Instrumentation WMI service allows attackers to cause a denial of service memory consumption and crash by creating security contexts more quickly than they can be cleared from the RPC cache...
CVE-2005-1792
Memory leak in Windows Management Instrumentation WMI service allows attackers to cause a denial of service memory consumption and crash by creating security contexts more quickly than they can be cleared from the RPC cache...
CVE-2005-1792: Undefined Security Weakness
Memory leak in Windows Management Instrumentation WMI service allows attackers to cause a denial of service memory consumption and crash by creating security contexts more quickly than they can be cleared from the RPC cache...
CVE-2004-0207
"Shatter" style vulnerability in the Window Management application programming interface API for Microsoft Windows 98, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows local users to gain privileges by using certain API functions to change properties of privileged programs...
Microsoft Window Management API Local Privilege Escalation Vulnerability
Description Microsoft has reported that several unspecified Window Management API functions can allow a local attacker to change the attributes of an application with higher-level privileges to gain elevated privileges on a vulnerable computer. This issue represents a fundamental design flaw;...
Microsoft Windows Local User Information
Using the supplied credentials, Nessus was able to retrieve information for each local user. Note that this plugin itself does not issue a report and only serves to store information about each local user in the KB for further checks. C Tenable Network Security, Inc. include"compat.inc"; if...
Windows Management Instrumentation (WMI) Remote Command Execution
This module executes powershell on the remote host using the current user credentials or those supplied. Instead of using PSEXEC over TCP port 445 we use the WMIC command to start a Remote Procedure Call on TCP port 135 and an ephemeral port. Set ReverseListenerComm to tunnel traffic through that...
