341 matches found
CVE-2011-3406
CVE-2011-3406 describes a buffer overflow in Microsoft Windows Active Directory, ADAM, and AD LDS that can allow a remote authenticated attacker to execute arbitrary code by sending a crafted LDAP query. Root cause: memory initialization issue in LDAP request handling. Affected products/versions ...
MS Windows Active Directory Remote Code Execution Vulnerability (2640045)
This host is missing a critical security update according to Microsoft Bulletin MS11-095 OpenVAS Vulnerability Test $Id: secpodms11-095.nasl 8276 2018-01-03 12:29:18Z asteins $ MS Windows Active Directory Remote Code Execution Vulnerability 2640045 Authors: Madhuri D Copyright: Copyright c 2011...
Adam Shostack on Methods of Compromise, the New School and Learning
Dennis Fisher talks with Adam Shostack of Microsoft about the taxonomy he helped develop for classifying how PCs are compromised, what he would and wouldn’t change in The New School of Information Security and who he’s learned the most from. Podcast audio courtesy of sykboy65 Subscribe to the...
CVE-2011-2014
The CVE-2011-2014 entry concerns LDAPS in Active Directory, ADAM, and AD LDS where the LDAPS implementation does not check Certificate Revocation Lists (CRLs). Affected products include Windows XP SP2/SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2/R2/R2 SP1, and Windows ...
CentOS Update for kdegraphics CESA-2009:1512 centos4 i386
Check for the Version of kdegraphics OpenVAS Vulnerability Test CentOS Update for kdegraphics CESA-2009:1512 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...
Security Metrics Go Prime Time at Metricon 6
The metrics movement that has been slowly but surely infiltrating the security community in the last few years has had its own annual gathering–Metricon–for some time now. It’s been a small, quasi-academic conference since its inception, but now Metricon’s organizers are branching out a bit,...
Coalfire Expands Dallas Office and Names Kurt Hagerman Managing Director
I am pleased to announce that our Dallas office is growing by leaps and bounds. Leading the charge is Kurt Hagerman, the newly appointed managing director. Kurt will serve more than 60 clients in the Southwest region and oversee Coalfires strategic vision while building new client relationships f...
Adam Shostack on User-Centric Privacy and the Need for Smarter Regulation
Dennis Fisher talks with author Adam Shostack about the merits of the user-centric privacy model, why users don’t pay more attention to privacy and data collection and the need for smarter privacy regulations. Podcast audio courtesy of sykboy65 Subscribe to the Digital Underground podcast on...
Microsoft LSASS ADAM/ADLDS Privilege Escalation Vulnerability
Description Microsoft Windows Local Security Authority Subsystem Service LSASS is prone to a privilege-escalation vulnerability. This issue occurs in Active Directory, Active Directory Application Mode ADAM, and Active Directory Lightweight Directory Service ADLDS. An attacker can exploit this...
Nagios XI users.php SQL Injection
Nagios XI users.php SQL Injection Advisory Information Advisory ID: NGENUITY-2010-008 Date published: 8/24/2010 Vulnerability Information Class: SQL Injection SQLi Software Description Nagios XI is the commercial / enterprise version of the open source Nagios project. Vulnerability Description...
Nagios XI users.php SQL Injection
Nagios XI users.php SQL Injection Advisory Information Advisory ID: NGENUITY-2010-008 Date published: 8/24/2010 Vulnerability Information Class: SQL Injection SQLi Software Description Nagios XI is the commercial / enterprise version of the open source Nagios project. Vulnerability Description...
Ubuntu Update for opie vulnerability USN-955-1
Ubuntu Update for Linux kernel vulnerabilities USN-955-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN9551.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for opie vulnerability USN-955-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...
ftp-libopie NSE Script
Checks if an FTPd is prone to CVE-2010-1938 OPIE off-by-one stack overflow, a vulnerability discovered by Maksymilian Arciemowicz and Adam "pi3" Zabrocki. See the advisory at . Be advised that, if launched against a vulnerable host, this script will crash the FTPd. Script Arguments vulns.short,...
JForum 2.1.8 Cross Site Request Forgery / Cross Site Scripting
JForum 2.1.8 bookmarks CSRF & XSS Advisory Information Advisory ID: NGENUITY-2010-004 Date published: 2010-06-06 Vulnerability Information Class: Cross-Site Request Forgery CSRF Software Description Per jforum.net "JForum is a powerful and robust discussion board system implemented in Java^tm . I...
JForum 2.1.8 BookMarks - Cross-Site Request Forgery / Cross-Site Scripting
JForum 2.1.8 bookmarks CSRF & XSS Advisory Information Advisory ID: NGENUITY-2010-004 Date published: 2010-06-06 Vulnerability Information Class: Cross-Site Request Forgery CSRF Software Description Per jforum.net "JForum is a powerful and robust discussion board system implemented in Java^tm . I...
FreeBSD 8.0 ftpd off-by one PoC (FreeBSD-SA-10:05)
No description provided by source. FreeBSD 8.0 ftpd off-by one PoC FreeBSD-SA-10:05 CVE-2010-1938 FreeBSD-SA-10:05 Credit: Maksymilian Arciemowicz and Adam Zabrocki http://securityreason.com/achievementsecurityalert/87 http://security.freebsd.org/advisories/FreeBSD-SA-10:05.opie.asc...
FreeBSD 8.0 - 'ftpd' (FreeBSD-SA-10:05) Off-By-One (PoC)
FreeBSD 8.0 ftpd off-by one PoC FreeBSD-SA-10:05 CVE-2010-1938 FreeBSD-SA-10:05 Credit: Maksymilian Arciemowicz and Adam Zabrocki http://securityreason.com/achievementsecurityalert/87 http://security.freebsd.org/advisories/FreeBSD-SA-10:05.opie.asc http://blog.pi3.com.pl/?p=111 PoC: Connected to...
FreeBSD 8.0 - ftpd (FreeBSD-SA-10:05) Off-By-One (PoC)
FreeBSD 8.0 - ftpd FreeBSD-SA-10:05 Off-By-One PoC FreeBSD 8.0 ftpd off-by one PoC FreeBSD-SA-10:05 CVE-2010-1938 FreeBSD-SA-10:05 Credit: Maksymilian Arciemowicz and Adam Zabrocki http://securityreason.com/achievementsecurityalert/87 http://security.freebsd.org/advisories/FreeBSD-SA-10:05.opie.a...
