4630 matches found
CVE-2009-2509
Active Directory Federation Services ADFS in Microsoft Windows Server 2003 SP2 and Server 2008 Gold and SP2 does not properly validate headers in HTTP requests, which allows remote authenticated users to execute arbitrary code via a crafted request to an IIS web server, aka "Remote Code Execution...
Design/Logic Flaw
The single sign-on implementation in Active Directory Federation Services ADFS in Microsoft Windows Server 2003 SP2 and Server 2008 Gold and SP2 does not properly remove credentials at the end of a network session, which allows physically proximate attackers to obtain the credentials of a previou...
Remote code execution
Active Directory Federation Services ADFS in Microsoft Windows Server 2003 SP2 and Server 2008 Gold and SP2 does not properly validate headers in HTTP requests, which allows remote authenticated users to execute arbitrary code via a crafted request to an IIS web server, aka "Remote Code Execution...
CVE-2009-2508
The single sign-on implementation in Active Directory Federation Services ADFS in Microsoft Windows Server 2003 SP2 and Server 2008 Gold and SP2 does not properly remove credentials at the end of a network session, which allows physically proximate attackers to obtain the credentials of a previou...
CVE-2009-2509
Active Directory Federation Services ADFS in Microsoft Windows Server 2003 SP2 and Server 2008 Gold and SP2 does not properly validate headers in HTTP requests, which allows remote authenticated users to execute arbitrary code via a crafted request to an IIS web server, aka "Remote Code Execution...
CVE-2009-2508
CVE-2009-2508 affects Microsoft Windows ADFS SSO: the single sign-on implementation does not properly discard credentials at end of a session, enabling physically proximate attackers to impersonate a previous user by reusing browser-cache data. Affected are Windows Server 2003 SP2 and Windows Ser...
CVE-2009-2509
In CVE-2009-2509, Active Directory Federation Services (ADFS) on Windows Server 2003 SP2 and Windows Server 2008 SP2/Gold exposes remote code execution due to incorrect validation of HTTP request headers by an authenticated user. A crafted HTTP request to an ADFS-enabled IIS web server can execut...
Microsoft Windows Active Directory Federation Service multiple security vulnerabilities
Code execution, session hijack...
Microsoft Security Bulletin MS09-070 - Important Vulnerabilities in Active Directory Federation Services Could Allow Remote Code Execution (971726)
Microsoft Security Bulletin MS09-070 - Important Vulnerabilities in Active Directory Federation Services Could Allow Remote Code Execution 971726 Published: December 08, 2009 Version: 1.0 General Information Executive Summary This security update resolves two privately reported vulnerabilities in...
Microsoft Active Directory Federation Services Code Execution (MS09-070; CVE-2009-2509)
Active Directory provides central authentication and authorization services for Windows-based systems. Active Directory Federation Services ADFS helps the client to use single sign-on by securely sharing digital identity and entitlement rights across security and enterprise boundaries. A remote...
Microsoft Active Directory Federation Services Header Validation Remote Code Execution Vulnerability
Description Microsoft Active Directory Federation Services ADFS is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the application, which may aid in further attacks. Technologies Affected Microsoft Windows Server 2003...
MS09-070: Vulnerabilities in Active Directory Federation Services Could Allow Remote Code Execution (971726)
The version of Microsoft Active Directory Federation Services ADFS installed on the remote host is affected by the following vulnerabilities : - Insufficient session management validation in the single sign-on functionality of ADFS could allow a remote, authenticated user to spoof the identity of...
Microsoft Windows Active Directory Denial of Service Vulnerability (973309)
This host is missing a critical security update according to Microsoft Bulletin MS09-066. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Microsoft Windows Active Directory Denial of Service Vulnerability (973309)
This host is missing a critical security update according to Microsoft Bulletin MS09-066. OpenVAS Vulnerability Test $Id: secpodms09-066.nasl 5363 2017-02-20 13:07:22Z cfi $ Microsoft Windows Active Directory Denial of Service Vulnerability 973309 Authors: Antu Sanadi Updated By: Madhuri D on...
CVE-2009-1928
Stack consumption vulnerability in the LDAP service in Active Directory on Microsoft Windows 2000 SP4, Server 2003 SP2, and Server 2008 Gold and SP2; Active Directory Application Mode ADAM on Windows XP SP2 and SP3 and Server 2003 SP2; and Active Directory Lightweight Directory Service AD LDS on...
Stack overflow
Stack consumption vulnerability in the LDAP service in Active Directory on Microsoft Windows 2000 SP4, Server 2003 SP2, and Server 2008 Gold and SP2; Active Directory Application Mode ADAM on Windows XP SP2 and SP3 and Server 2003 SP2; and Active Directory Lightweight Directory Service AD LDS on...
CVE-2009-1928
Stack consumption vulnerability in the LDAP service in Active Directory on Microsoft Windows 2000 SP4, Server 2003 SP2, and Server 2008 Gold and SP2; Active Directory Application Mode ADAM on Windows XP SP2 and SP3 and Server 2003 SP2; and Active Directory Lightweight Directory Service AD LDS on...
CVE-2009-1928
The CVE-2009-1928 entry describes an LSASS Recursive Stack Overflow vulnerability that causes denial of service in Active Directory implementations. Affected software includes: Microsoft Windows 2000 Server SP4, Windows Server 2003 SP2, Windows Server 2008 (Gold and SP2) Active Directory; Active ...
Microsoft LDAP请求连接远程拒绝服务漏洞（MS09-066）
BUGTRAQ ID: 36918 CVE ID: CVE-2009-1928 Microsoft Windows是微软发布的非常流行的操作系统。 Windows 2000 Server、Windows Server 2003和Windows Server 2008上的活动目录实现中存在拒绝服务漏洞；安装在Windows XP和Windows Server 2003上的活动目录应用模式（ADAM）实现及Windows Server 2008上的活动目录轻型目录服务（AD...