Microsoft Windows Active Directory Remote Code Execution Vulnerability (2640045)

This host is missing a critical security update according to Microsoft Bulletin MS11-095 SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Cross-Site Scripting Vuln in Zoho ManageEngine ADSelfServicePlus

Vulnerability ID: VRPTH-2011-001 Reference: http://jameswebb.me/vulns/vrpth-2011-001.txt Vulnerability Summary ====================== Non-persistent XSS in Zoho ManageEngine ADSelfService Plus Test Environment ================= Windows 2008RC2 fully patched. ManageEngine ADSelfServicePlus version...

Zoho ManageEngine ADSelfService Plus 4.5 Cross Site Scripting

Vulnerability ID: VRPTH-2011-001 Reference: http://jameswebb.me/vulns/vrpth-2011-001.txt Vulnerability Summary ====================== Non-persistent XSS in Zoho ManageEngine ADSelfService Plus Test Environment ================= Windows 2008RC2 fully patched. ManageEngine ADSelfServicePlus version...

Windows Gather Enumerate Computers

This module will enumerate computers included in the primary Active Directory domain. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Windows Gather Enumerate Computers', 'Description' = %q Thi...

Microsoft Windows Active Directory LDAPS Authentication Bypass Vulnerability (2630837)

This host is missing a critical security update according to Microsoft Bulletin MS11-086. OpenVAS Vulnerability Test $Id: secpodms11-086.nasl 8276 2018-01-03 12:29:18Z asteins $ Microsoft Windows Active Directory LDAPS Authentication Bypass Vulnerability 2630837 Authors: Madhuri D Copyright:...

Microsoft Windows active directory authentication bypass

Certificate revocation list is not checked on LDAPs access...

Microsoft Windows活动目录LDAPS身份验证绕过漏洞(MS11-086)

CVE ID: CVE-2011-2014 Microsoft Windows是流行的计算机操作系统。 Microsoft Windows在实现上存在安全漏洞，可被恶意用户利用绕过安全限制。 此漏洞源于由于无法根据CRL验证与域账号相关的SSL证书的撤销状态，活动目录在配置为使用LDAP over SSL（非默认设置）时存在错误。 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows Storage Server 2003 Microsoft Windows Server 2008 Microsoft Windows...

Microsoft Windows Active Directory LDAPS Authentication Bypass Vulnerability (2630837)

This host is missing a critical security update according to Microsoft Bulletin MS11-086. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2011-2014

The LDAP over SSL aka LDAPS implementation in Active Directory, Active Directory Application Mode ADAM, and Active Directory Lightweight Directory Service AD LDS in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7...

CVE-2011-2014

The CVE-2011-2014 entry concerns LDAPS in Active Directory, ADAM, and AD LDS where the LDAPS implementation does not check Certificate Revocation Lists (CRLs). Affected products include Windows XP SP2/SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2/R2/R2 SP1, and Windows ...

MS11-086: Vulnerability in Active Directory could allow elevation of privilege: November 8, 2011

Resolves a vulnerability in Active Directory that could allow elevation of privilege.INTRODUCTIONMicrosoft has released security bulletin MS11-086. To view the complete security bulletin, visit one of the following Microsoft websites: Home...

PT-2011-3552 · Microsoft · Windows Xp +7

Name of the Vulnerable Software and Affected Versions: Active Directory versions prior to the fixed version Active Directory Application Mode ADAM versions prior to the fixed version Active Directory Lightweight Directory Service AD LDS versions prior to the fixed version Microsoft Windows XP...

MS11-086: Vulnerability in Active Directory Could Allow Elevation of Privilege (2630837)

The remote Windows host has a version of Active Directory that fails to validate the revocation status of an SSL certificate against the CRL Certificate Revocation List associated with the domain account. When Active Directory is configured to use LDAP over SSL, a remote attacker can exploit this...

MS11-086: Description of the security update for Active Directory: November 8, 2011

None None...

Microsoft Active Directory LDAPS Authentication Bypass Vulnerability

Description Microsoft Active Directory is prone to an authentication-bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions by using a revoked certificate. Technologies Affected Avaya Aura Conferencing 6.0 Standard Avaya CallPilot 4.0 Avaya CallPilot 5.0...

CVE-2011-2014: Improper Authentication

The LDAP over SSL aka LDAPS implementation in Active Directory, Active Directory Application Mode ADAM, and Active Directory Lightweight Directory Service AD LDS in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7...

IT-Grundschutz M4.315: Aufrechterhaltung der Betriebssicherheit von Active Directory

IT-Grundschutz M4.315: Aufrechterhaltung der Betriebssicherheit von Active Directory. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.94233 Diese Prüfung bezieht sich a...

IT-Grundschutz M4.315: Aufrechterhaltung der Betriebssicherheit von Active Directory

IT-Grundschutz M4.315: Aufrechterhaltung der Betriebssicherheit von Active Directory. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.94233 Diese Prüfung bezieht sich a...

krb5-enum-users NSE Script

Discovers valid usernames by brute force querying likely usernames against a Kerberos service. When an invalid username is requested the server will respond using the Kerberos error code KRB5KDCERRCPRINCIPALUNKNOWN, allowing us to determine that the user name was invalid. Valid user names will...

GateOne Beta - Terminal emulator for HTML5 web browsers

GateOne Beta - Terminal emulator for HTML5 web browsers The software makes use of WebSockets to connect a server backend written in Python and a frontend written for modern browsers in JavaScript, HTML5 and CSS. The frontend doesn't require any browser plug-ins to be installed.Gate One also...