Security Bulletin: Vulnerability in InstallAnywhere affects IBM InfoSphere Change Data Capture installers (CVE-2016-4560)

Summary InstallAnywhere generates installation executables on Microsoft Windows which are vulnerable to a DLL-planting exploit affecting the Change Data Capture CDC components within the IBM InfoSphere Data Replication and IBM InfoSphere Change Data Delivery families of products. Vulnerability...

Security Bulletin: Vulnerability in InstallAnywhere affects IBM WebSphere Appliance Management Center for Microsoft Windows (CVE-2016-2542)

Summary An InstallAnywhere vulnerability was disclosed by Flexera. InstallAnywhere is used by IBM WebSphere Appliance Management Center for Microsoft Windows. Vulnerability Details CVEID: CVE-2016-2542 DESCRIPTION: Flexera InstallAnywhere could allow a local attacker to gain elevated privileges o...

Microsoft Windows: Turn off multicast name resolution

This test checks the setting for policy OpenVAS Vulnerability Test $Id: windcmulticastnameresolution.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Turn off multicast name resolution Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This...

Microsoft Windows: Require domain users to elevate when setting a networks location

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winncstddomainusersetlocation.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Require domain users to elevate when setting a networks location Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

Microsoft Windows: Enable insecure guest logons

This test checks the setting for policy OpenVAS Vulnerability Test $Id: wininsecureguestlogons.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Enable insecure guest logons Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is...

Microsoft Windows: MSS: IP source routing protection level

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winmlipsourcerouting.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for MSS: DisableIPSourceRouting IP source routing protection level protects against packet spoofing Authors: Emanuel Moss Copyright: Copyright c 2018...

Microsoft Windows: LAPS: Enable local admin password management

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winlapspasswdmanagement.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Enable local admin password management Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This...

Microsoft Windows: LAPS: Password Settings: Password Age (Days)

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winlapspasswdage.nasl 11344 2018-09-12 06:57:52Z emoss $ Check value for Password Settings: Password Age Days Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is...

Microsoft Windows: MS Security Guide: Configure SMB v1 client driver

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winsgsmbv1clientdriver.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Configure SMB v1 client driver Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is...

Microsoft Windows: MSS: How often keep-alive packets are sent in milliseconds

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winmlkeepalivetime.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for MSS: KeepAliveTime How often keep-alive packets are sent in milliseconds Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

Microsoft Windows: MS Security Guide: Apply UAC restrictions to local accounts on network logons

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winsguacrestrictionslocalaccounts.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Apply UAC restrictions to local accounts on network logons Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

Microsoft Windows: Presence of LAPS AdmPwd GPO Extension / CSE

This test checks the presence of LAPS AdmPwd GPO Extension / CSE on Windows hosts at least Windows 8.1. The Local Administrator Password Solution LAPS tool, which is free and supported software that allows an organization to automatically set randomized and unique local Administrator account...

Microsoft Windows: MSS: How many times unacknowledged data is retransmitted

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winmltcpmaxdataretransmission.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for MSS: TcpMaxDataRetransmissions How many times unacknowledged data is retransmitted 3 recommended, 5 is default Authors: Emanuel Moss...

Microsoft Windows: MSS: Prevent the dial-up passsword from being saved

This test checks the setting for policy MSS: DisableSavePassword Prevent the dial-up passsword from being saved recommended OpenVAS Vulnerability Test $Id: winmldialuppasswdsaved.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for MSS: DisableSavePassword Prevent the dial-up passsword from...

Microsoft Windows: MSS: Ignore NetBIOS name release requests except from WINS servers

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winmlnonamereleaseondemand.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for MSS: NoNameReleaseOnDemand Allow the computer to ignore NetBIOS name release requests except from WINS servers Authors: Emanuel Moss Copyright...

Microsoft Windows: MSS: IPv6 source routing protection level

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winmlipv6sourcerouting.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for MSS: DisableIPSourceRouting IPv6 IP source routing protection level protects against packet spoofing Authors: Emanuel Moss Copyright: Copyright c...

Microsoft Windows: Prohibit installation and configuration of Network Bridge on the DNS domain network

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winncallownetbridgenla.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Prohibit installation and configuration of Network Bridge on your DNS domain network Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone...

Microsoft Windows: LAPS: password expiration not longer than required by policy

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winlapspasswordexpiration.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Do not allow password expiration time longer than required by policy Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

Microsoft Windows: MSS: Allow ICMP redirects to override OSPF generated routes

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winmlenableicmpredirect.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for MSS: EnableICMPRedirect Allow ICMP redirects to override OSPF generated routes Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networ...

Microsoft Windows: MSS: Allow IRDP to detect and configure Default Gateway addresses

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winmlperformrouterdiscovery.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for MSS: PerformRouterDiscovery Allow IRDP to detect and configure Default Gateway addresses could lead to DoS Authors: Emanuel Moss Copyright:...