MS Windows Server 2003 AD Pre-Auth BROWSER ELECTION Heap Overflow

Exploit for windows platform in category dos / poc MS Windows Server 2003 AD Pre-Auth BROWSER ELECTION Remote Heap Overflow Release date: 2011-02-14 Author: Cupidon-3005 Greet: Winny Thomas, Laurent Gaffie, h07 Bug: Heap Overflow Remote Exploitability: Unlikely Local Exploitability: Likely Contex...

ZOHO ManageEngine ADSelfService multiple vulnerabilities

Core Security Technologies - Corelabs Advisory ZOHO ManageEngine ADSelfService multiple vulnerabilities 1. Advisory Information Title: ZOHO ManageEngine ADSelfService multiple vulnerabilities Advisory ID: CORE-2011-0103 Advisory URL:...

CVE-2011-0040

The server in Microsoft Active Directory on Windows Server 2003 SP2 does not properly handle an update request for a service principal name SPN, which allows remote attackers to cause a denial of service authentication downgrade or outage via a crafted request that triggers name collisions, aka...

Input validation

The server in Microsoft Active Directory on Windows Server 2003 SP2 does not properly handle an update request for a service principal name SPN, which allows remote attackers to cause a denial of service authentication downgrade or outage via a crafted request that triggers name collisions, aka...

CVE-2011-0040

The CVE-2011-0040 vulnerability affects Microsoft Active Directory on Windows Server 2003 SP2, where the server mishandles an update request for a Service Principal Name (SPN). This can allow remote attackers to cause a denial of service or authentication outage via crafted SPN update requests th...

Microsoft Windows Active Directory SPN Denial of Service (2478953)

This host is missing a critical security update according to Microsoft Bulletin MS11-005. OpenVAS Vulnerability Test $Id: secpodms11-005.nasl 5362 2017-02-20 12:46:39Z cfi $ Microsoft Windows Active Directory SPN Denial of Service 2478953 Authors: Antu Sanadi Copyright: Copyright c 2011 SecPod,...

CVE-2011-0040

The server in Microsoft Active Directory on Windows Server 2003 SP2 does not properly handle an update request for a service principal name SPN, which allows remote attackers to cause a denial of service authentication downgrade or outage via a crafted request that triggers name collisions, aka...

Microsoft Windows Active Directory SPN Denial of Service (2478953)

This host is missing a critical security update according to Microsoft Bulletin MS11-005. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Ships 12 Bulletins in February's Patch Tuesday

Microsoft addressed 22 flaws with 12 separate bulletins in February’s edition of Patch Tuesday, including three bulletins that were rated critical with the remaining nine rated as important. Among the programs affected are Microsoft Windows, Internet Explorer, Office, Visual Studio, and IIS. The...

Microsoft Active Directory SPN Validation Denial of Service (MS11-005; CVE-2011-0040)

A denial of service vulnerability has been reported in implementations of Microsoft Windows Active Directory due to improper validation of service principal names SPN, which could result in SPN collisions The vulnerability is due to an error in Active Directory that fails to properly process...

MS11-005: Vulnerability in Active Directory Could Allow Denial of Service (2478953)

The version of Active Directory installed on the remote host fails to properly validate service principal names SPN, which could result in SPN collisions. If a collision occurs, services that use the SPN will downgrade to NTLM when configured to do so. Services that are not configured to negotiat...

Microsoft Active Directory DoS

Crash on SPN processing...

Microsoft Active Directory Denial of Service Vulnerability (953235)

This host is missing a critical security update according to Microsoft Bulletin MS08-035. OpenVAS Vulnerability Test $Id: gbms08-035.nasl 5362 2017-02-20 12:46:39Z cfi $ Microsoft Active Directory Denial of Service Vulnerability 953235 Authors: Madhuri D Copyright: Copyright c 2011 Greenbone...

Microsoft Active Directory Denial of Service Vulnerability (953235)

This host is missing a critical security update according to Microsoft Bulletin MS08-035. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Low: Red Hat Bug Fix Advisory: samba3x bug fix and enhancement update

Updated samba3x packages that fix several bugs and add various enhancements are now available. Samba is a suite of programs used by machines for authentication, and file and printer sharing. These updated samba3x packages provide fixes for the following bugs: Users of trusted child domains were n...

CVE-2010-0214

The administrative interface on the PolyVision RoomWizard with firmware 3.2.3 places the Sync Connector Active Directory AD credentials in a web form that is accessed over HTTP on port 80, which allows remote attackers to obtain sensitive information by reading the HTML source code corresponding ...

Design/Logic Flaw

The administrative interface on the PolyVision RoomWizard with firmware 3.2.3 places the Sync Connector Active Directory AD credentials in a web form that is accessed over HTTP on port 80, which allows remote attackers to obtain sensitive information by reading the HTML source code corresponding ...

PolyVision RoomWizard insecurely stores Sync Connector Active Directory credentials and uses default administrative password

Overview The PolyVision RoomWizard web based scheduling system with touch screen display contains two vulnerabilities that allow an unauthorized user to access the device console and Sync Connector Active Directory credentials. Description The PolyVision RoomWizard is a touch screen scheduling...

krb5: KDC uninitialized pointer crash in authorization data handling (MITKRB5-SA-2010-006)

The mergeauthdata function in kdcauthdata.c in the Key Distribution Center KDC in MIT Kerberos 5 aka krb5 1.8.x before 1.8.4 does not properly manage an index into an authorization-data list, which allows remote attackers to cause a denial of service daemon crash, or possibly obtain sensitive...

Mandriva Update for krb5 MDVSA-2010:202 (krb5)

Check for the Version of krb5 OpenVAS Vulnerability Test Mandriva Update for krb5 MDVSA-2010:202 krb5 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...