Microsoft Windows Active Directory CVE-2013-3868 Denial of Service Vulnerability

Description Microsoft Windows is prone to a denial-of-service vulnerability. Successful exploits may allow the attacker to cause the LDAP service to become non-responsive, resulting in denial-of-service conditions. Technologies Affected Avaya Aura Conferencing 6.0 SP1 Standard Avaya Aura...

Microsoft LDAP Remote Anonymous Denial of Service (MS13-079; CVE-2013-3868)

A denial of service vulnerability exists in implementations of Microsoft Active Directory...

MS13-079: Vulnerability in Active Directory could allow denial of service: September 10, 2013

None None...

Host Information Enumeration via NTLM Authentication

This module makes requests to resources on the target server in an attempt to find resources which permit NTLM authentication. For resources which permit NTLM authentication, a blank NTLM type 1 message is sent to enumerate a type 2 message from the target server. The type 2 message is then parse...

Error installing BEM – System.IndexOutOfRangeException: Index was outside the bounds of the array

Challenge Cause As indicated by this line in the error message "VmEMSetup.Dialogs.VMEMDialogAddConfig.EnumSSLCertificates", there is an issue parsing certificates with an empty Subject field, and they will need to be removed. The offending certificates are not self-signed because they are generat...

Active Directory - Enumerate User Account Policy

Binary data adsienumuseraccountpolicy.nbin...

Microsoft Active Directory Federation Services信息泄露漏洞(CVE-2013-3185)(MS13-066)

BUGTRAQ ID: 61672 CVECAN ID: CVE-2013-3185 活动目录（Active Directory）是面向Windows Standard Server、Windows Enterprise Server以及Windows Datacenter Server的目录服务。 Microsoft Active Directory Federation Services...

Microsoft Reissues MS13-066 Windows Server Patch

Microsoft has re-released one of the August security patches for Windows Server 2008 in order to fix a regression issue that would cause some servers to stop working. The MS13-066 patch was released again Monday after Microsoft discovered the problem last week. The patch in the MS13-066 update...

Information disclosure

Microsoft Active Directory Federation Services AD FS 1.x through 2.1 on Windows Server 2003 R2 SP2, Windows Server 2008 SP2 and R2 SP1, and Windows Server 2012 allows remote attackers to obtain sensitive information about the service account, and possibly conduct account-lockout attacks, by...

CVE-2013-3185

Microsoft Active Directory Federation Services AD FS 1.x through 2.1 on Windows Server 2003 R2 SP2, Windows Server 2008 SP2 and R2 SP1, and Windows Server 2012 allows remote attackers to obtain sensitive information about the service account, and possibly conduct account-lockout attacks, by...

CVE-2013-3185

CVE-2013-3185 affects Microsoft Active Directory Federation Services (AD FS) versions 1.x through 2.1 on Windows Server 2003 R2 SP2, 2008 SP2 and R2 SP1, and 2012. The vulnerability allows remote attackers to disclose information about the AD FS service account, potentially enabling account-locko...

PT-2013-4209

Name of the Vulnerable Software and Affected Versions Microsoft Active Directory Federation Services AD FS versions 1.x through 2.1 Description The issue allows remote attackers to obtain sensitive information about the service account, and possibly conduct account-lockout attacks, by connecting ...

Microsoft Active Directory Federation Services Information Disclosure Vulnerability (2873872)

This host is missing an important security update according to Microsoft Bulletin MS13-066. OpenVAS Vulnerability Test $Id: secpodms13-066.nasl 5346 2017-02-19 08:43:11Z cfi $ Microsoft Active Directory Federation Services Information Disclosure Vulnerability 2873872 Authors: Veerendra G.G...

CVE-2013-3185: Exposure of Sensitive Information to an Unauthorized Actor

Microsoft Active Directory Federation Services AD FS 1.x through 2.1 on Windows Server 2003 R2 SP2, Windows Server 2008 SP2 and R2 SP1, and Windows Server 2012 allows remote attackers to obtain sensitive information about the service account, and possibly conduct account-lockout attacks, by...

MS13-066: Vulnerability in Active Directory Federation Services Could Allow Information Disclosure (2873872)

The remote Windows host is affected by an unspecified vulnerability in the Active Directory Federation Services AD FS that may allow an attacker to obtain the AD FS instance account information. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid69331; scriptversion"1.10...

Microsoft Active Directory Federation Services information leakage

It's possible to obtain service account information to cause account locking via unsuccessful logon attempts...

Microsoft Active Directory Federation Services Information Disclosure Vulnerability (2873872)

This host is missing an important security update according to Microsoft Bulletin MS13-066. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Active Directory Federation Services CVE-2013-3185 Information Disclosure Vulnerability

Description Microsoft Active Directory Federation Services is prone to an information disclosure vulnerability. An attacker can exploit this issue to gain access to sensitive information that may aid in further attacks. Technologies Affected Avaya CallPilot 4.0 Avaya CallPilot 4.0.1 Avaya CallPil...

MS13-066: Vulnerability in Active Directory Federation Services could allow information disclosure: August 13, 2013

Resolves a vulnerability in Active Directory Federation Services AD FS that could reveal information that relates to the service account that is used by AD FS.INTRODUCTIONMicrosoft has released security bulletin MS13-066. To view the complete security bulletin, go to the following Microsoft...

Microsoft Active Directory Federation Services Information Disclosure (MS13-066; CVE-2013-3185)

An information disclosure vulnerability exists in Active Directory Federation Services AD FS that could allow the unintentional disclosure of account information...