Mandriva Update for krb5 MDVSA-2010:202 (krb5)

Check for the Version of krb5 OpenVAS Vulnerability Test Mandriva Update for krb5 MDVSA-2010:202 krb5 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Mandriva Linux Security Advisory : krb5 (MDVSA-2010:202)

A vulnerability was discovered and corrected in krb5 : The mergeauthdata function in kdcauthdata.c in the Key Distribution Center KDC in MIT Kerberos 5 aka krb5 1.8.x before 1.8.4 does not properly manage an index into an authorization-data list, which allows remote attackers to cause a denial of...

DEBIAN-CVE-2010-1322

The mergeauthdata function in kdcauthdata.c in the Key Distribution Center KDC in MIT Kerberos 5 aka krb5 1.8.x before 1.8.4 does not properly manage an index into an authorization-data list, which allows remote attackers to cause a denial of service daemon crash, or possibly obtain sensitive...

Authorization

The mergeauthdata function in kdcauthdata.c in the Key Distribution Center KDC in MIT Kerberos 5 aka krb5 1.8.x before 1.8.4 does not properly manage an index into an authorization-data list, which allows remote attackers to cause a denial of service daemon crash, or possibly obtain sensitive...

CVE-2010-1322

The mergeauthdata function in kdcauthdata.c in the Key Distribution Center KDC in MIT Kerberos 5 aka krb5 1.8.x before 1.8.4 does not properly manage an index into an authorization-data list, which allows remote attackers to cause a denial of service daemon crash, or possibly obtain sensitive...

CVE-2010-0820

Heap-based buffer overflow in the Local Security Authority Subsystem Service LSASS, as used in Active Directory in Microsoft Windows Server 2003 SP2 and Windows Server 2008 Gold, SP2, and R2; Active Directory Application Mode ADAM in Windows XP SP2 and SP3 and Windows Server 2003 SP2; and Active...

Heap overflow

Heap-based buffer overflow in the Local Security Authority Subsystem Service LSASS, as used in Active Directory in Microsoft Windows Server 2003 SP2 and Windows Server 2008 Gold, SP2, and R2; Active Directory Application Mode ADAM in Windows XP SP2 and SP3 and Windows Server 2003 SP2; and Active...

CVE-2010-0820

CVE-2010-0820 is an LSASS heap overflow vulnerability affecting Active Directory, ADAM, and AD LDS. An authenticated attacker could exploit specially crafted LDAP messages sent to a listening LSASS service to achieve code execution with elevated privileges. The vulnerability impacts multiple Wind...

Microsoft Security Bulletin MS10-068 - Important Vulnerability in Local Security Authority Subsystem Service Could Allow Elevation of Privilege (983539)

Microsoft Security Bulletin MS10-068 - Important Vulnerability in Local Security Authority Subsystem Service Could Allow Elevation of Privilege 983539 Published: September 14, 2010 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability ...

PT-2010-2546 · Microsoft · Windows Xp +7

Name of the Vulnerable Software and Affected Versions: Microsoft Windows Server 2003 SP2 Microsoft Windows Server 2008 Gold, SP2, and R2 Microsoft Windows XP SP2 and SP3 Microsoft Windows Vista SP2 Microsoft Windows 7 Microsoft Windows Server 2008 Gold, SP2, and R2 Active Directory Application Mo...

MS Local Security Authority Subsystem Service Privilege Elevation Vulnerability (983539)

This host is missing a critical security update according to Microsoft Bulletin MS10-068. OpenVAS Vulnerability Test $Id: secpodms10-068.nasl 5361 2017-02-20 11:57:13Z cfi $ MS Local Security Authority Subsystem Service Privilege Elevation Vulnerability 983539 Authors: Antu Sanadi Copyright:...

Microsoft Local Security Authority Subsystem Service Privilege Elevation Vulnerability (983539)

This host is missing a critical security update according to Microsoft Bulletin MS10-068. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows LSASS Malformed LDAP Messages Heap Overflow (MS10-060; CVE-2010-0820)

Active Directory provides central authentication and authorization services for Windows-based systems. Active Directory Application Mode ADAM is a Lightweight Directory Access Protocol LDAP directory service that runs as a user service. An authenticated elevation of privilege vulnerability has be...

MS10-068: Vulnerability in Local Security Authority Subsystem Service Could Allow Elevation of Privilege (983539)

The version of the Local Security Authority Subsystem Service LSASS installed on the remote Windows host does not properly handle malformed packets in LDAP messages when used in conjunction with Microsoft Active Directory / Active Directory Application Mode / Active Directory Lightweight Director...

Microsoft LSASS ADAM/ADLDS Privilege Escalation Vulnerability

Description Microsoft Windows Local Security Authority Subsystem Service LSASS is prone to a privilege-escalation vulnerability. This issue occurs in Active Directory, Active Directory Application Mode ADAM, and Active Directory Lightweight Directory Service ADLDS. An attacker can exploit this...

USN-964-2: Likewise Open regression

USN-964-1 fixed vulnerabilities in Likewise Open. The upstream fixes were incomplete, which caused problems running certain services. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Matt Weatherford discovered that Likewise Open did not correctly chec...

USN-964-1: Likewise Open vulnerability

Matt Weatherford discovered that Likewise Open did not correctly check password expiration for the local-provider account. A local attacker could exploit this to log into a system they would otherwise not have access to...

Active Directory Install at DHS Questioned

An audit of the Department of Homeland Security’s Microsoft Windows Active Directory at its headquarters revealed that its implementation failed to fully comply with the department’s security guidelines, and no mechanism was in place to ensure its level of security, DHS’s inspector general said i...

ManageEngine ADManager Plus Detection

ADManager Plus, a web-based management and reporting application for Active Directory, was detected on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid46785; scriptversion"1.7"; scriptcvsdate"Date: 2019/11/25"; scriptnameenglish:"ManageEngine ADManage...

ManageEngine ADAudit Plus Detection

ADAudit Plus, a web-based Active Directory change auditing software, was detected on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid46788; scriptversion"1.7"; scriptcvsdate"Date: 2019/11/25"; scriptnameenglish:"ManageEngine ADAudit Plus Detection";...