[SECURITY] Fedora 14 Update: ocsinventory-1.3.3-5.fc14

Open Computer and Software Inventory Next Generation is an application designed to help a network or system administrator keep track of the computers configuration and software that are installed on the network. OCS Inventory is also able to detect all active devices on your network, such as...

Windows Gather Enumerate Computers

This module will enumerate computers included in the primary Active Directory domain. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Windows Gather Enumerate Computers', 'Description' = %q Thi...

Microsoft Windows active directory authentication bypass

Certificate revocation list is not checked on LDAPs access...

Microsoft Windows Active Directory LDAPS Authentication Bypass Vulnerability (2630837)

This host is missing a critical security update according to Microsoft Bulletin MS11-086. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows活动目录LDAPS身份验证绕过漏洞(MS11-086)

CVE ID: CVE-2011-2014 Microsoft Windows是流行的计算机操作系统。 Microsoft Windows在实现上存在安全漏洞，可被恶意用户利用绕过安全限制。 此漏洞源于由于无法根据CRL验证与域账号相关的SSL证书的撤销状态，活动目录在配置为使用LDAP over SSL（非默认设置）时存在错误。 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows Storage Server 2003 Microsoft Windows Server 2008 Microsoft Windows...

Microsoft Windows Active Directory LDAPS Authentication Bypass Vulnerability (2630837)

This host is missing a critical security update according to Microsoft Bulletin MS11-086. OpenVAS Vulnerability Test $Id: secpodms11-086.nasl 8276 2018-01-03 12:29:18Z asteins $ Microsoft Windows Active Directory LDAPS Authentication Bypass Vulnerability 2630837 Authors: Madhuri D Copyright:...

CVE-2011-2014

The LDAP over SSL aka LDAPS implementation in Active Directory, Active Directory Application Mode ADAM, and Active Directory Lightweight Directory Service AD LDS in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7...

CVE-2011-2014

The CVE-2011-2014 entry concerns LDAPS in Active Directory, ADAM, and AD LDS where the LDAPS implementation does not check Certificate Revocation Lists (CRLs). Affected products include Windows XP SP2/SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2/R2/R2 SP1, and Windows ...

MS11-086: Vulnerability in Active Directory Could Allow Elevation of Privilege (2630837)

The remote Windows host has a version of Active Directory that fails to validate the revocation status of an SSL certificate against the CRL Certificate Revocation List associated with the domain account. When Active Directory is configured to use LDAP over SSL, a remote attacker can exploit this...

MS11-086: Description of the security update for Active Directory: November 8, 2011

None None...

Microsoft Active Directory LDAPS Authentication Bypass Vulnerability

Description Microsoft Active Directory is prone to an authentication-bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions by using a revoked certificate. Technologies Affected Avaya Aura Conferencing 6.0 Standard Avaya CallPilot 4.0 Avaya CallPilot 5.0...

MS11-086: Vulnerability in Active Directory could allow elevation of privilege: November 8, 2011

Resolves a vulnerability in Active Directory that could allow elevation of privilege.INTRODUCTIONMicrosoft has released security bulletin MS11-086. To view the complete security bulletin, visit one of the following Microsoft websites: Home...

PT-2011-3552 · Microsoft · Windows Xp +7

Name of the Vulnerable Software and Affected Versions: Active Directory versions prior to the fixed version Active Directory Application Mode ADAM versions prior to the fixed version Active Directory Lightweight Directory Service AD LDS versions prior to the fixed version Microsoft Windows XP...

IT-Grundschutz M4.315: Aufrechterhaltung der Betriebssicherheit von Active Directory

IT-Grundschutz M4.315: Aufrechterhaltung der Betriebssicherheit von Active Directory. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.94233 Diese Prüfung bezieht sich a...

IT-Grundschutz M4.315: Aufrechterhaltung der Betriebssicherheit von Active Directory

IT-Grundschutz M4.315: Aufrechterhaltung der Betriebssicherheit von Active Directory. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.94233 Diese Prüfung bezieht sich a...

Joomla Multiple Components SQL Injection Vulnerabilities

This host is running Joomla with multiple components and is prone to SQL injection vulnerabilities. OpenVAS Vulnerability Test $Id: gbjoomlamultcomponentssqlinjvuln.nasl 7052 2017-09-04 11:50:51Z teissa $ Joomla Multiple Components SQL Injection Vulnerabilities Authors: Madhuri D Copyright:...

Micro-point active Defense software privilege escalation-vulnerability warning-the black bar safety net

Brief description: Micro-point active Defense software could allow elevation of Privilege, leading to execute arbitrary kernel code Detailed description: Micro-point active Defense software mp110012. sys file fails to properly check user of the incoming parameters, can lead to execute arbitrary...

Active CMS 1.2.0 'mod' Cross-site Scripting Vulnerability

Advisory: Active CMS 1.2.0 'mod' Cross-site Scripting Vulnerability Advisory ID: SSCHADV2011-020 Author: Stefan Schurtz Affected Software: Successfully tested on Active CMS 1.2.0 Vendor URL: http://www.activedev.net/ Vendor Status: informed CVE-ID: - ========================== Vulnerability...

krb5-enum-users NSE Script

Discovers valid usernames by brute force querying likely usernames against a Kerberos service. When an invalid username is requested the server will respond using the Kerberos error code KRB5KDCERRCPRINCIPALUNKNOWN, allowing us to determine that the user name was invalid. Valid user names will...

GateOne Beta - Terminal emulator for HTML5 web browsers

GateOne Beta - Terminal emulator for HTML5 web browsers The software makes use of WebSockets to connect a server backend written in Python and a frontend written for modern browsers in JavaScript, HTML5 and CSS. The frontend doesn't require any browser plug-ins to be installed.Gate One also...