Denial of Service Attack on AD DC DRSUAPI server

Description All versions of Samba from 4.7.0 onwards are vulnerable to a denial of service attack which can crash the "samba" process when Samba is an Active Directory Domain Controller. Missing database output checks on the returned directory attributes from the LDB database layer cause the...

Dumping Domain Password Hashes

It is very common during penetration tests where domain administrator access has been achieved to extract the password hashes of all the domain users for offline cracking and analysis. These hashes are stored in a database file in the domain controller NTDS.DIT with some additional information li...

Microsoft Windows: Interactive logon: Number of previous logons to cache

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winilnumpreviouslogoncache.nasl 11532 2018-09-21 19:07:30Z cfischer $ Check value for nteractive logon: Number of previous logons to cache in case domain controller is not available Authors: Emanuel Moss Copyright: Copyright ...

FTPShell Server 6.80 - Denial of Service

FTPShell Server 6.80 - Denial of Service Exploit Title: FTPShell Server 6.80 - Local Denial of Service Exploit Author: Hashim Jawad Date: 2018-05-23 Vendor Homepage: http://www.ftpshell.com/ Vulnerable Software: http://www.ftpshell.com/downloadserver.htm Tested on: Windows 7 Enterprise - SP1 x86...

FTPShell Server 6.80 - Denial of Service

Exploit Title: FTPShell Server 6.80 - Local Denial of Service Exploit Author: Hashim Jawad Date: 2018-05-23 Vendor Homepage: http://www.ftpshell.com/ Vulnerable Software: http://www.ftpshell.com/downloadserver.htm Tested on: Windows 7 Enterprise - SP1 x86 Steps to reproduce: under FTP user accoun...

Kuik: a simple yet annoying piece of adware

Some pieces of malware can be so simple—and yet such a pain to get rid of—especially when they start interfering with your system's configuration. This much is true for the Kuik adware program, which surprised us all by forcing affected machines to join a domain controller. The perpetrators are...

April 17, 2018—KB4093121 (Preview of Monthly Rollup)

None None...

March 22, 2018—KB4088889 (OS Build 14393.2155)

None None...

Samba Security Bypass Vulnerability (CNVD-2018-07048)

Samba is a freeware implementation of the SMB protocol on Linux and UNIX systems, consisting of a server and a client program. A security bypass vulnerability exists in Samba due to an LDAP server on a Samba Active Directory AD Domain Controller DC that does not properly validate privileges when...

UBUNTU-CVE-2018-1057

On a Samba 4 AD DC the LDAP server in all versions of Samba from 4.0.0 onwards incorrectly validates permissions to modify passwords over LDAP allowing authenticated users to change any other users' passwords, including administrative users and privileged service accounts eg Domain Controllers...

EAP7 Privilege escalation when managing domain including earlier version slaves

The domain controller will not propagate its administrative RBAC configuration to some slaves. An attacker could use this to escalate their privileges...

EAP7 Privilege escalation when managing domain including earlier version slaves

The domain controller will not propagate its administrative RBAC configuration to some slaves. An attacker could use this to escalate their privileges...

EAP7 Privilege escalation when managing domain including earlier version slaves

The domain controller will not propagate its administrative RBAC configuration to some slaves. An attacker could use this to escalate their privileges...

EAP7 Privilege escalation when managing domain including earlier version slaves

The domain controller will not propagate its administrative RBAC configuration to some slaves. An attacker could use this to escalate their privileges...

Automated Adversary Emulation System: CALDERA

CALDERA is an automated adversary emulation system that performs post-compromise adversarial behavior within enterprise networks. It generates plans during operation using a planning system and a pre-configured adversary model based on the Adversarial Tactics, Techniques & Common Knowledge ATT&CK...

November 27, 2017—KB4051034 (Preview of Monthly Rollup)

None None...

November 27, 2017—KB4050946 (Preview of Monthly Rollup)

None None...

October 10, 2017—KB4041691 (OS Build 14393.1770)

None None...

PVS Image Not Able to Get DHCP Address, Group Policies Not Applying

Event ID 5719 is logged when you start a Domain Member that is a PVS target Event Type: Error Event Source: NETLOGON Event Category: None Event ID: 5719Date: DateTime: TimeUser: N/A Computer: ServerDescription:No Domain Controller is available for domain due to the following: There are currently ...

Debian Security Advisory DSA 3909-1 (samba - security update)

Jeffrey Altman, Viktor Duchovni and Nico Williams identified a mutual authentication bypass vulnerability in samba, the SMB/CIFS file, print, and login server. Also known as Orpheus OpenVAS Vulnerability Test $Id: deb3909.nasl 6800 2017-07-26 06:58:22Z cfischer $ Auto-generated from advisory DSA...