Metasploit Framework v3.5.1 Updated Version Download !

Our favourite exploitation framework – The Metasploit Framework has been updated! We now have Metasploit version 3.5.1! "The Metasploit Framework is a penetration testing toolkit, exploit development platform, and research tool. The framework includes hundreds of working remote exploits for a...

snmp-win32-services NSE Script

Attempts to enumerate Windows services through SNMP. Script Arguments creds.service, creds.global See the documentation for the creds library. snmp.version See the documentation for the snmp library. Example Usage nmap -sU -p 161 --script=snmp-win32-services Script Output | snmp-win32-services: |...

Design/Logic Flaw

Microsoft Windows Media Format Runtime 9.0, 9.5, and 11 and Windows Media Services 9.1 and 2008 do not properly parse malformed headers in Advanced Systems Format ASF files, which allows remote attackers to execute arbitrary code via a crafted 1 .asf, 2 .wmv, or 3 .wma file, aka "Windows Media...

CVE-2008-5232

Buffer overflow in the CallHTMLHelp method in the Microsoft Windows Media Services ActiveX control in nskey.dll 4.1.00.3917 in Windows Media Services on Microsoft Windows NT and 2000, and Avaya Media and Message Application servers, allows remote attackers to execute arbitrary code via a long...

MS Windows 2003 Token Kidnapping Local Exploit PoC

No description provided by source. From http://nomoreroot.blogspot.com/2008/10/windows-2003-poc-exploit-for-token.html It has been a long time since Token Kidnapping presentation http://www.argeniss.com/research/TokenKidnapping.pdf was published so I decided to release a PoC exploit for Win2k3 th...

Code injection

Unspecified vulnerability in the 1 Windows Services for UNIX 3.0 and 3.5, and 2 Subsystem for UNIX-based Applications in Microsoft Windows 2000, XP, Server 2003, and Vista allows local users to gain privileges via unspecified vectors related to "certain setuid binary files."...

CVE-2007-3036

CVE-2007-3036 describes a local privilege-escalation vulnerability in Windows Services for UNIX (WSF) 3.0 and 3.5 and in the Subsystem for UNIX-based Applications on Windows 2000/XP/Server 2003/Vista. The underlying issue is improper handling of setuid binary files which may allow a local, authen...

CVE-2007-3036

Unspecified vulnerability in the 1 Windows Services for UNIX 3.0 and 3.5, and 2 Subsystem for UNIX-based Applications in Microsoft Windows 2000, XP, Server 2003, and Vista allows local users to gain privileges via unspecified vectors related to "certain setuid binary files."...

Microsoft Windows Services for UNIX privilege escalation

Invalid suid files handling...

Microsoft Security Bulletin MS07-053 - Important Vulnerability in Windows Services for UNIX Could Allow Elevation of Privilege (939778)

Microsoft Security Bulletin MS07-053 - Important Vulnerability in Windows Services for UNIX Could Allow Elevation of Privilege 939778 Published: September 11, 2007 | Updated: September 11, 2007 Version: 1.0 General Information Executive Summary This important security update resolves one publicly...

Update Protection against Microsoft Management Console (MMC) Remote Code Execution Vulnerability (MS06-044)

Microsoft Management Console MMC is prone to a cross-site scripting XSS vulnerability. MMC is an application that allows a user to perform administrative tasks, configure Windows services and more. A remote attacker can exploit this vulnerability to execute arbitrary commands on an affected syste...

Microsoft Security Bulletin MS06-011 Permissive Windows Services DACLs Could Allow Elevation of Privilege (914798)

Microsoft Security Bulletin MS06-011 Permissive Windows Services DACLs Could Allow Elevation of Privilege 914798 Published: March 14, 2006 | Updated: March 17, 2006 Version: 1.0 Summary Who should read this document: Customers who use Microsoft Windows Impact of Vulnerability: Elevation of...

CVE-2005-2150

Windows NT 4.0 and Windows 2000 before URP1 for Windows 2000 SP4 does not properly prevent NULL sessions from accessing certain alternate named pipes, which allows remote attackers to 1 list Windows services via svcctl or 2 read eventlogs via eventlog...

CVE-2005-2150

Windows NT 4.0 and Windows 2000 before URP1 for Windows 2000 SP4 does not properly prevent NULL sessions from accessing certain alternate named pipes, which allows remote attackers to 1 list Windows services via svcctl or 2 read eventlogs via eventlog...

RKDetect - behaviour based rootkit detection utility

Rkdetect is a little anomaly detection tool which can find services hidden by generic Windows rootkits like Hacker Defender. Tool very simply. It enumerates services on remote computer through WMI user level and Services Control Manager kernel level, compare result and display difference. In this...

Metainfo Sendmail 2.0/2.5 / MetaIP 3.1 - Upload / Execute Read Scripts

source: https://www.securityfocus.com/bid/110/info MetaInfo www.metainfo.com puts out many NT service products, including MetaIP DHCP/DNS manager and Sendmail Unix port. Both products allow remote administration via Web UIs, and MetaIP uses Java to communicate back to the server. MetaInfo bundles...