777 matches found
On a Samba 4 AD DC the LDAP server in all versions of Samba from 4.0.0 onwards incorrectly validates permissions to modify passwords over LDAP allowing authenticated users to change any other users' passwords including administrative users and privileged service accounts (eg Domain Controllers).
...
KB5010794: Out-of-band update for Windows 8.1 and Windows Server 2012 R2: January 17, 2022
KB5010794: Out-of-band update for Windows 8.1 and Windows Server 2012 R2: January 17, 2022 Summary This update resolves the following issues: Virtual machines VMs located on a server that has Unified Extensible Firmware Interface UEFI enabled fail to start after installing the January 11, 2022...
January 17, 2022—KB5010796 (OS Build 20348.473) Out-of-band
None None...
January 17, 2022—KB5010790 (OS Build 14393.4889) Out-of-band
None None...
[updated] You can update now: Microsoft patches 97 bugs including 6 zero-days and a wormable one
How time flies sometimes. Microsoft yesterday released the first patch Tuesday security updates of the year 2022. The update includes fixes for six zero-day vulnerabilities and a total of 97 bugs. This includes two Remote Code Execution RCE vulnerabilities affecting open source libraries. None of...
January 11, 2022—KB5009543 (OS Builds 19042.1466, 19043.1466, and 19044.1466)
None None...
January 11, 2022—KB5009619 (Security-only update)
None None...
January 11, 2022—KB5009624 (Monthly Rollup)
None None...
January 11, 2022—KB5009621 (Security-only update)
None None...
January 11, 2022—KB5009546 (OS Build 14393.4886) - EXPIRED
None None...
January 11, 2022—KB5009595 (Security-only update)
None None...
January 11, 2022—KB5009610 (Monthly Rollup)
None None...
January 11, 2022—KB5009555 (OS Build 20348.469)
None None...
LACheck - Multithreaded C# .NET Assembly Local Administrative Privilege Enumeration
Multithreaded C .NET Assembly Local Administrative Privilege Enumeration Arguments domain controller to query if not ran on a domain-joined host /domain - specify domain name if not ran on a domain-joined host /edr - check host for EDR requires smb, rpc, or winrm /logons - return logged on users ...
Samba Active Directory Domain Controller Code Execution
The vulnerability of the Active Directory Domain Controller component in the Samba networking software package arises due to a buffer overflow. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
A flaw was found in the way Samba, as an Active Directory Domain Controller, implemented Kerberos name-based authentication. The Samba AD DC, could become confused about the user a ticket represents if it did not strictly require a Kerberos PAC and always use the SIDs found within. The result cou...
PT-2021-6305
Name of the Vulnerable Software and Affected Versions Windows Encrypting File System EFS affected versions not specified Description The issue is related to insufficient access restrictions in the Windows Encrypting File System EFS component, allowing a remote attacker to elevate their privileges...
OESA-2021-1461 samba security update
Samba is a suite of programs for Linux and Unix to interoperate with Windows. Security Fixes: A flaw was discovered in the way samba implements SMB1 authentication. Even if Kerberos authentication is required, an attacker can use this flaw to retrieve the clear text password sent over the...
DetectionLabELK - A Fork From DetectionLab With ELK Stack Instead Of Splunk
DetectionLabELK is a fork from Chris Long's DetectionLab with ELK stack instead of Splunk. Description: DetectionLabELK is the perfect lab to use if you would like to build effective detection capabilities. It has been designed with defenders in mind. Its primary purpose is to allow blueteams to...