Cyberoam UTM Multiiple Vulnerabilities

Exploit for hardware platform in category web applications Affected Software: Cyberoam CR50ia 10.01.0 build 678 Vulnerability: OS Command Execution Severity: High Release Date: Unreleased I. Background "Cyberoam Unified Threat Management appliances offer assured security, connectivity and...

Cyberoam UTM Credential Disclosure

SECURITY ADVISORY: cyberoam-utm-insecure-password-handling Affected Software: Cyberoam CR50ia 10.01.0 build 678 Vulnerability: Insecure Password Handling Severity: High Release Date: Unreleased I. Background "Cyberoam Unified Threat Management appliances offer assured security, connectivity and...

ManageEngine ADManager Plus 5.2 Cross Site Scripting

ManageEngine ADManager Plus 5.2 Multiple XSS Vulnerabilities Vendor: Zoho Corporation Pvt. Ltd. Product web page: http://www.manageengine.com Affected version: 5.2 Summary: ADManager Plus is a simple, easy-to-use Windows Active Directory Management and Reporting Solution that helps AD...

ManageEngine ADManager Plus 5.2 Multiple XSS Vulnerabilities

Summary ADManager Plus is a simple, easy-to-use Windows Active Directory Management and Reporting Solution that helps AD Administrators and Help Desk Technicians with their day-to-day activities. Description ADManager Plus suffers from multiple XSS vulnerabilities when parsing user input to the...

Microsoft Windows Active Directory LDAPS Authentication Bypass (MS11-086; CVE-2011-2014)

An elevation of privilege vulnerability has been reported in Microsoft Windows Active Directory...

dns-srv-enum NSE Script

Enumerates various common service SRV records for a given domain name. The service records contain the hostname, port and priority of servers for a given service. The following services are enumerated by the script: - Active Directory Global Catalog - Exchange Autodiscovery - Kerberos KDC...

Microsoft Active Directory buffer overflow

Buffer overflow on LDAP request parsing...

Microsoft Active Directory缓冲区溢出漏洞(MS11-095)

BUGTRAQ ID: 50959 CVE ID: CVE-2011-3406 活动目录（Active Directory）是面向Windows Standard Server、Windows Enterprise Server以及Windows Datacenter Server的目录服务。 Active Directory在实现上存在远程代码执行漏洞，成功利用后可允许攻击者以当前用户权限执行任意代码。 0 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows Server 2008 Microsoft Windo...

CVE-2011-3406

Buffer overflow in Active Directory, Active Directory Application Mode ADAM, and Active Directory Lightweight Directory Service AD LDS in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote...

Buffer overflow

Buffer overflow in Active Directory, Active Directory Application Mode ADAM, and Active Directory Lightweight Directory Service AD LDS in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote...

CVE-2011-3406

Buffer overflow in Active Directory, Active Directory Application Mode ADAM, and Active Directory Lightweight Directory Service AD LDS in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote...

CVE-2011-3406

Buffer overflow in Active Directory, Active Directory Application Mode ADAM, and Active Directory Lightweight Directory Service AD LDS in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote...

PT-2011-4435 · Microsoft · Windows Xp +7

Name of the Vulnerable Software and Affected Versions: Active Directory versions prior to the fixed version Active Directory Application Mode ADAM versions prior to the fixed version Active Directory Lightweight Directory Service AD LDS versions prior to the fixed version Microsoft Windows XP...

CVE-2011-3406

CVE-2011-3406 describes a buffer overflow in Microsoft Windows Active Directory, ADAM, and AD LDS that can allow a remote authenticated attacker to execute arbitrary code by sending a crafted LDAP query. Root cause: memory initialization issue in LDAP request handling. Affected products/versions ...

MS Windows Active Directory Remote Code Execution Vulnerability (2640045)

This host is missing a critical security update according to Microsoft Bulletin MS11-095 OpenVAS Vulnerability Test $Id: secpodms11-095.nasl 8276 2018-01-03 12:29:18Z asteins $ MS Windows Active Directory Remote Code Execution Vulnerability 2640045 Authors: Madhuri D Copyright: Copyright c 2011...

MS11-095: Vulnerability in Active Directory Could Allow Remote Code Execution (2640045)

The version of Active Directory installed on the remote host is is affected by a buffer overflow vulnerability. A remote, authenticated attacker can exploit this flaw to execute arbitrary code on the remote host subject to the privileges of the user running the Active Directory service. C Tenable...

MS11-095: Description of the security update for Active Directory: December 13, 2011

None None...

MS11-095: Vulnerability in Active Directory could allow remote code execution: December 13, 2011

Resolves a vulnerability in Active Directory that could allow remote code execution.INTRODUCTIONMicrosoft has released security bulletin MS11-095. To view the complete security bulletin, visit one of the following Microsoft websites: Home...

Microsoft Active Directory CVE-2011-3406 Buffer Overflow Vulnerability

Description Microsoft Active Directory is prone to a buffer-overflow vulnerability. Successful exploits can allow attackers to execute arbitrary code with Network Service privileges. Failed exploit attempts may result in a denial-of-service condition. Technologies Affected Avaya Aura Conferencing...

Microsoft Windows Active Directory Remote Code Execution Vulnerability (2640045)

This host is missing a critical security update according to Microsoft Bulletin MS11-095 SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...