5326 matches found
MS Windows Active Directory Remote Code Execution Vulnerability (2640045)
This host is missing a critical security update according to Microsoft Bulletin MS11-095 OpenVAS Vulnerability Test $Id: secpodms11-095.nasl 8276 2018-01-03 12:29:18Z asteins $ MS Windows Active Directory Remote Code Execution Vulnerability 2640045 Authors: Madhuri D Copyright: Copyright c 2011...
Microsoft Active Directory CVE-2011-3406 Buffer Overflow Vulnerability
Description Microsoft Active Directory is prone to a buffer-overflow vulnerability. Successful exploits can allow attackers to execute arbitrary code with Network Service privileges. Failed exploit attempts may result in a denial-of-service condition. Technologies Affected Avaya Aura Conferencing...
MS11-095: Vulnerability in Active Directory could allow remote code execution: December 13, 2011
Resolves a vulnerability in Active Directory that could allow remote code execution.INTRODUCTIONMicrosoft has released security bulletin MS11-095. To view the complete security bulletin, visit one of the following Microsoft websites: Home...
MS11-095: Description of the security update for Active Directory: December 13, 2011
None None...
Microsoft Windows Active Directory Remote Code Execution Vulnerability (2640045)
This host is missing a critical security update according to Microsoft Bulletin MS11-095 SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
MS11-095: Vulnerability in Active Directory Could Allow Remote Code Execution (2640045)
The version of Active Directory installed on the remote host is is affected by a buffer overflow vulnerability. A remote, authenticated attacker can exploit this flaw to execute arbitrary code on the remote host subject to the privileges of the user running the Active Directory service. C Tenable...
Cross-Site Scripting Vuln in Zoho ManageEngine ADSelfServicePlus
Vulnerability ID: VRPTH-2011-001 Reference: http://jameswebb.me/vulns/vrpth-2011-001.txt Vulnerability Summary ====================== Non-persistent XSS in Zoho ManageEngine ADSelfService Plus Test Environment ================= Windows 2008RC2 fully patched. ManageEngine ADSelfServicePlus version...
Zoho ManageEngine ADSelfService Plus 4.5 Cross Site Scripting
Vulnerability ID: VRPTH-2011-001 Reference: http://jameswebb.me/vulns/vrpth-2011-001.txt Vulnerability Summary ====================== Non-persistent XSS in Zoho ManageEngine ADSelfService Plus Test Environment ================= Windows 2008RC2 fully patched. ManageEngine ADSelfServicePlus version...
Windows Gather Enumerate Computers
This module will enumerate computers included in the primary Active Directory domain. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Windows Gather Enumerate Computers', 'Description' = %q Thi...
Microsoft Windows Active Directory LDAPS Authentication Bypass Vulnerability (2630837)
This host is missing a critical security update according to Microsoft Bulletin MS11-086. OpenVAS Vulnerability Test $Id: secpodms11-086.nasl 8276 2018-01-03 12:29:18Z asteins $ Microsoft Windows Active Directory LDAPS Authentication Bypass Vulnerability 2630837 Authors: Madhuri D Copyright:...
Microsoft Windows active directory authentication bypass
Certificate revocation list is not checked on LDAPs access...
Microsoft Windows活动目录LDAPS身份验证绕过漏洞(MS11-086)
CVE ID: CVE-2011-2014 Microsoft Windows是流行的计算机操作系统。 Microsoft Windows在实现上存在安全漏洞，可被恶意用户利用绕过安全限制。 此漏洞源于由于无法根据CRL验证与域账号相关的SSL证书的撤销状态，活动目录在配置为使用LDAP over SSL（非默认设置）时存在错误。 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows Storage Server 2003 Microsoft Windows Server 2008 Microsoft Windows...
Microsoft Windows Active Directory LDAPS Authentication Bypass Vulnerability (2630837)
This host is missing a critical security update according to Microsoft Bulletin MS11-086. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
CVE-2011-2014
The LDAP over SSL aka LDAPS implementation in Active Directory, Active Directory Application Mode ADAM, and Active Directory Lightweight Directory Service AD LDS in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7...
CVE-2011-2014
The CVE-2011-2014 entry concerns LDAPS in Active Directory, ADAM, and AD LDS where the LDAPS implementation does not check Certificate Revocation Lists (CRLs). Affected products include Windows XP SP2/SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2/R2/R2 SP1, and Windows ...
PT-2011-3552 · Microsoft · Windows Xp +7
Name of the Vulnerable Software and Affected Versions: Active Directory versions prior to the fixed version Active Directory Application Mode ADAM versions prior to the fixed version Active Directory Lightweight Directory Service AD LDS versions prior to the fixed version Microsoft Windows XP...
Microsoft Active Directory LDAPS Authentication Bypass Vulnerability
Description Microsoft Active Directory is prone to an authentication-bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions by using a revoked certificate. Technologies Affected Avaya Aura Conferencing 6.0 Standard Avaya CallPilot 4.0 Avaya CallPilot 5.0...
MS11-086: Vulnerability in Active Directory could allow elevation of privilege: November 8, 2011
Resolves a vulnerability in Active Directory that could allow elevation of privilege.INTRODUCTIONMicrosoft has released security bulletin MS11-086. To view the complete security bulletin, visit one of the following Microsoft websites: Home...
MS11-086: Vulnerability in Active Directory Could Allow Elevation of Privilege (2630837)
The remote Windows host has a version of Active Directory that fails to validate the revocation status of an SSL certificate against the CRL Certificate Revocation List associated with the domain account. When Active Directory is configured to use LDAP over SSL, a remote attacker can exploit this...
CVE-2011-2014: Improper Authentication
The LDAP over SSL aka LDAPS implementation in Active Directory, Active Directory Application Mode ADAM, and Active Directory Lightweight Directory Service AD LDS in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7...