Lucene search
K

5 matches found

Packet Storm
Packet Storm
added 2016/09/23 12:0 a.m.86 views

Kerberos Security Feature Bypass

Exploit Title: Kerberos Security Feature Bypass Vulnerability Kerberos to NTLM Fallback Date: 22-09-2016 Exploit Author: Nabeel Ahmed Tested on: Windows 7 Professional x32/x64 and Windows 10 x64 CVE : CVE-2016-3237 Category: Local Exploits & Privilege Escalation SPECIAL CONFIG: Standard Domain...

6.9CVSS0.17181EPSS
Exploits5
0day.today
0day.today
added 2016/09/22 12:0 a.m.100 views

Kerberos in Microsoft Windows - Security Feature Bypass (MS16-101)

Exploit for windows platform in category local exploits Exploit Title: Kerberos Security Feature Bypass Vulnerability Kerberos to NTLM Fallback Date: 22-09-2016 Exploit Author: Nabeel Ahmed Tested on: Windows 7 Professional x32/x64 and Windows 10 x64 CVE : CVE-2016-3237 Category: Local Exploits &...

6.9CVSS7.4AI score0.17181EPSS
Exploits5
NVD
NVD
added 2016/08/09 9:59 p.m.18 views

CVE-2016-3237

Kerberos in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows man-in-the-middle attackers to bypass authentication via vectors related to a fallback to NTLM...

7.5CVSS7.5AI score0.17181EPSS
Exploits5References4
CVE
CVE
added 2016/08/09 9:0 p.m.123 views

CVE-2016-3237

CVE-2016-3237 is a Kerberos authentication bypass in multiple Windows versions where domain password changes may fall back to NTLM, enabling MITM style bypass of authentication. Affected: Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold/R...

7.5CVSS7.4AI score0.17181EPSS
Exploits5References4Affected Software8
Symantec
Symantec
added 2016/08/09 12:0 a.m.45 views

Microsoft Windows Kerberos CVE-2016-3237 Security Bypass Vulnerability

Description Microsoft Windows is prone to a security bypass vulnerability. Successfully exploiting this issue may allow attackers to bypass certain security restrictions and perform unauthorized actions by conducting a man-in-the-middle attack. This may lead to other attacks. Note: This issue was...

6.9CVSS1.7AI score0.17181EPSS
Exploits5Affected Software4
Rows per page
Query Builder