21 matches found
SUSE CVE-2004-0808
The processlogonpacket function in the nmbd server for Samba 3.0.6 and earlier, when domain logons are enabled, allows remote attackers to cause a denial of service via a SAMUASCHANGE request with a length value that is larger than the number of structures that are provided...
SUSE CVE-2007-6015
Stack-based buffer overflow in the sendmailslot function in nmbd in Samba 3.0.0 through 3.0.27a, when the "domain logons" option is enabled, allows remote attackers to execute arbitrary code via a GETDC mailslot request composed of a long GETDC string following an offset username in a SAMLOGON...
Update for RDC 7.1 to support restricted administration logons on Windows 7 and Windows Server 2008 R2
Update for RDC 7.1 to support restricted administration logons on Windows 7 and Windows Server 2008 R2 About this update This Remote Desktop Protocol RDP 7.1 update enables the Remote Desktop Connection client to perform restricted administration logons. It also enables the Remote Desktop Service...
netABuse Insufficient Windows Authentication Logic Scanner
import os,re,time,signal,sys from subprocess import from multiprocessing import Process By John Page aka hyp3rlinx Apparition Security twitter.com/hyp3rlinx Advisory: http://hyp3rlinx.altervista.org/advisories/MICROSOFT-WINDOWS-NET-USE-INSUFFICIENT-PASSWORD-PROMPT.txt...
Design/Logic Flaw
Medtronic Valleylab Exchange Client version 3.4 and below, Valleylab FT10 Energy Platform VLFT10GEN software version 4.0.0 and below, and Valleylab FX8 Energy Platform VLFX8GEN software version 1.1.0 and below use the descrypt algorithm for OS password hashing. While interactive, network-based...
Microsoft Windows: Enable insecure guest logons
This test checks the setting for policy OpenVAS Vulnerability Test $Id: wininsecureguestlogons.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Enable insecure guest logons Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is...
Microsoft Windows: Interactive logon: Number of previous logons to cache
This test checks the setting for policy OpenVAS Vulnerability Test $Id: winilnumpreviouslogoncache.nasl 11532 2018-09-21 19:07:30Z cfischer $ Check value for nteractive logon: Number of previous logons to cache in case domain controller is not available Authors: Emanuel Moss Copyright: Copyright ...
SAML logons fail on replicated Storefront Server
SAML enabled logons via Storefront configured and working on one SF3.0 server. When trying to setup a second one and after joining it to the server group we get "cannot log on using smart card". If we uninstall SF from that server and reinstall and configure it manually do not add it to the serve...
Users experience undesirable behaviour like profile corruption, data loss with Profile Management
Users may Experience Profile corruption, slow logons, data loss or unexpected behaviour if using profiles from differing Windows version as Roaming or UPM profiles...
Microsoft Windows SMB Relay Code Execution
No description provided by source. $Id: smbrelay.rb 10404 2010-09-21 00:13:30Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
Microsoft Windows Authenticated User Code Execution
No description provided by source. $Id: psexec.rb 11204 2010-12-02 17:29:26Z todb $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
Microsoft Windows - SMB Relay Code Execution (MS08-068) (Metasploit)
$Id: smbrelay.rb 10404 2010-09-21 00:13:30Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...
DEBIAN-CVE-2007-6015
Stack-based buffer overflow in the sendmailslot function in nmbd in Samba 3.0.0 through 3.0.27a, when the "domain logons" option is enabled, allows remote attackers to execute arbitrary code via a GETDC mailslot request composed of a long GETDC string following an offset username in a SAMLOGON...
CVE-2007-6015
Stack-based buffer overflow in the sendmailslot function in nmbd in Samba 3.0.0 through 3.0.27a, when the "domain logons" option is enabled, allows remote attackers to execute arbitrary code via a GETDC mailslot request composed of a long GETDC string following an offset username in a SAMLOGON...
samba: send_mailslot() buffer overflow
Stack-based buffer overflow in the sendmailslot function in nmbd in Samba 3.0.0 through 3.0.27a, when the "domain logons" option is enabled, allows remote attackers to execute arbitrary code via a GETDC mailslot request composed of a long GETDC string following an offset username in a SAMLOGON...
samba: send_mailslot() buffer overflow
Stack-based buffer overflow in the sendmailslot function in nmbd in Samba 3.0.0 through 3.0.27a, when the "domain logons" option is enabled, allows remote attackers to execute arbitrary code via a GETDC mailslot request composed of a long GETDC string following an offset username in a SAMLOGON...
Samba < 3.0.28 'send_mailslot' Function Buffer Overflow
Binary data 4311.prm...
Samba < 3.0.28 send_mailslot Function Remote Buffer Overflow
According to its banner, the version of the Samba server on the remote host is reportedly affected by a boundary error in 'nmbd' within the 'sendmailslot' function. Provided the 'domain logons' option is enabled in 'smb.conf', an attacker can leverage this issue to produce a stack-based buffer...
Boundary failure in GETDC mailslot
Description Secunia Research reported a vulnerability that allows for the execution of arbitrary code in nmbd. This defect is only be exploited when the "domain logons" parameter has been enabled in smb.conf. Patch Availability A patch addressing this defect has been posted to...
DEBIAN-CVE-2004-0808
The processlogonpacket function in the nmbd server for Samba 3.0.6 and earlier, when domain logons are enabled, allows remote attackers to cause a denial of service via a SAMUASCHANGE request with a length value that is larger than the number of structures that are provided...