RhinOS <= 3.0 r1113 Multiple Directory Traversal Vulnerabilities - Active Check

RhinOS is prone to multiple directory traversal vulnerabilities because it fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Home FTP Server <= 1.12 Multiple Directory Traversal Vulnerabilities - Active Check

Home FTP Server is prone to directory traversal vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Edraw Office Viewer Component 7.4 Active-X Buffer Overflow

function heapspray //exec calc.exe var shellcode = unescape "%u9090%u9090%u9090%u9090" ; shellcode += unescape...

Microsoft Windows2k3 Active Directory 'BROWSER ELECTION' Buffer Overflow Vulnerability

This host is installed with Active Directory and is prone to buffer overflow vulnerability. This NVT has been replaced by NVT secpodms11-019.nasl OID:1.3.6.1.4.1.25623.1.0.900279. OpenVAS Vulnerability Test $Id: gbmswindows2k3activedirectorybofvuln.nasl 5362 2017-02-20 12:46:39Z cfi $ Microsoft...

Microsoft Windows2k3 Active Directory 'BROWSER ELECTION' Buffer Overflow Vulnerability

Active Directory is prone to a buffer overflow vulnerability. This VT has been deprecated and replaced by the VT with the OID: 1.3.6.1.4.1.25623.1.0.900279. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Rising online virus scanner Active - X denial of service-vulnerability warning-the black bar safety net

ProgID: RavOLCtlLib. RavOnline ClassID: 9FAFB576-6 9 3 3-4CCC-AB3D-B988EC43D04E Member: Scan File: C:\Programme\Rising\RavOL\RavOLCtl.dll script safe: true init the safe: true Because Bullshit like this is unsaleable and i don't want to waste time coordinating patches with this vendor this is a...

Windows Server 2 0 0 3 AD pre-authoritative stack overflow-vulnerability warning-the black bar safety net

Mrxsmb.sys, around BowserWriteErrorLog+0x175, while trying to copy 1go from ESI to EDI ... Code will look something like this: if Len + 1 sizeofWCHAR TotalBufferSize Len = TotalSize/sizeofWCHAR - 1; -1 causes Len to go 0xFFFFFFFF Feel free to reuse this code without restrictions and ask...

CVE-2011-0654

CVE-2011-0654 describes an integer underflow in BowserWriteErrorLogEntry within the CIFS browser service (Mrxsmb.sys/bowser.sys) used by Active Directory; a malformed BROWSER ELECTION message can trigger a heap-based buffer overflow. Affected products include Windows XP SP2/SP3, Windows Server 20...

Drupal AES Encryption Module Information Disclosure Vulnerability (SA-CONTRIB-2011-005) - Active Check

Drupal AES Encryption Module is prone to an information disclosure vulnerability. Copyright C 2011 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progr...

MS Windows Server 2003 AD Pre-Auth BROWSER ELECTION Heap Overflow

Exploit for windows platform in category dos / poc MS Windows Server 2003 AD Pre-Auth BROWSER ELECTION Remote Heap Overflow Release date: 2011-02-14 Author: Cupidon-3005 Greet: Winny Thomas, Laurent Gaffie, h07 Bug: Heap Overflow Remote Exploitability: Unlikely Local Exploitability: Likely Contex...

ZOHO ManageEngine ADSelfService multiple vulnerabilities

Core Security Technologies - Corelabs Advisory ZOHO ManageEngine ADSelfService multiple vulnerabilities 1. Advisory Information Title: ZOHO ManageEngine ADSelfService multiple vulnerabilities Advisory ID: CORE-2011-0103 Advisory URL:...

CVE-2011-0040

The server in Microsoft Active Directory on Windows Server 2003 SP2 does not properly handle an update request for a service principal name SPN, which allows remote attackers to cause a denial of service authentication downgrade or outage via a crafted request that triggers name collisions, aka...

Input validation

The server in Microsoft Active Directory on Windows Server 2003 SP2 does not properly handle an update request for a service principal name SPN, which allows remote attackers to cause a denial of service authentication downgrade or outage via a crafted request that triggers name collisions, aka...

CVE-2011-0040

The CVE-2011-0040 vulnerability affects Microsoft Active Directory on Windows Server 2003 SP2, where the server mishandles an update request for a Service Principal Name (SPN). This can allow remote attackers to cause a denial of service or authentication outage via crafted SPN update requests th...

Microsoft Windows Active Directory SPN Denial of Service (2478953)

This host is missing a critical security update according to Microsoft Bulletin MS11-005. OpenVAS Vulnerability Test $Id: secpodms11-005.nasl 5362 2017-02-20 12:46:39Z cfi $ Microsoft Windows Active Directory SPN Denial of Service 2478953 Authors: Antu Sanadi Copyright: Copyright c 2011 SecPod,...

CVE-2011-0040

The server in Microsoft Active Directory on Windows Server 2003 SP2 does not properly handle an update request for a service principal name SPN, which allows remote attackers to cause a denial of service authentication downgrade or outage via a crafted request that triggers name collisions, aka...

Microsoft Windows Active Directory SPN Denial of Service (2478953)

This host is missing a critical security update according to Microsoft Bulletin MS11-005. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Ships 12 Bulletins in February's Patch Tuesday

Microsoft addressed 22 flaws with 12 separate bulletins in February’s edition of Patch Tuesday, including three bulletins that were rated critical with the remaining nine rated as important. Among the programs affected are Microsoft Windows, Internet Explorer, Office, Visual Studio, and IIS. The...

Microsoft Active Directory SPN Validation Denial of Service (MS11-005; CVE-2011-0040)

A denial of service vulnerability has been reported in implementations of Microsoft Windows Active Directory due to improper validation of service principal names SPN, which could result in SPN collisions The vulnerability is due to an error in Active Directory that fails to properly process...

MS11-005: Vulnerability in Active Directory Could Allow Denial of Service (2478953)

The version of Active Directory installed on the remote host fails to properly validate service principal names SPN, which could result in SPN collisions. If a collision occurs, services that use the SPN will downgrade to NTLM when configured to do so. Services that are not configured to negotiat...