Security Bulletin: Samba vulnerability issue on SONAS (CVE-2013-4408 and CVE-2012-6105)

Summary An attacker could gain privileged access to SONAS system by exploiting a vulnerability in Samba. Vulnerability Details CVE ID: CVE-2013-4408 and CVE-2012-6105 DESCRIPTION: This issue affects only those SONAS systems that use Active Directory server for authentication. Configuration with...

Security Bulletin: Vulnerability in Flexera InstallAnywhere affects IBM eDiscovery Analyzer (CVE-2016-4560)

Summary Flexera InstallAnywhere has a security vulnerability that could be exploited in IBM eDiscovery Analyzer. Vulnerability Details CVEID:CVE-2016-4560 DESCRIPTION:Flexera InstallAnywhere could allow a remote attacker to execute arbitrary code on the system. The application does not directly...

Security Bulletin: Vulnerability in InstallAnywhere affects IBM Content Collector for SAP Applications on Microsoft Windows (CVE-2016-4560)

Summary IBM Content Collector for SAP Applications on Microsoft Windows is affected by a vulnerability caused by InstallAnywhere. Vulnerability Details CVEID: CVE-2016-4560 DESCRIPTION: Flexera InstallAnywhere could allow a local attacker to gain elevated privileges on the system, caused by an...

Security Bulletin: SQL Injection for IBM Rational ClearQuest Maintenance tool (CVE-2011-1390)

Summary The IBM Rational ClearQuest Maintenance tool on Microsoft Windows platforms contains a feature to upgrade the user database. This feature is subject to a SQL Injection attack. Vulnerability Details | Subscribe to My Notifications to be notified of important product support alerts like thi...

Security Bulletin: Vulnerability in InstallAnywhere affects IBM InfoSphere Change Data Capture installers (CVE-2016-4560)

Summary InstallAnywhere generates installation executables on Microsoft Windows which are vulnerable to a DLL-planting exploit affecting the Change Data Capture CDC components within the IBM InfoSphere Data Replication and IBM InfoSphere Change Data Delivery families of products. Vulnerability...

Security Bulletin: Vulnerability in InstallAnywhere affects IBM WebSphere Appliance Management Center for Microsoft Windows (CVE-2016-2542)

Summary An InstallAnywhere vulnerability was disclosed by Flexera. InstallAnywhere is used by IBM WebSphere Appliance Management Center for Microsoft Windows. Vulnerability Details CVEID: CVE-2016-2542 DESCRIPTION: Flexera InstallAnywhere could allow a local attacker to gain elevated privileges o...

Microsoft Windows: Require domain users to elevate when setting a networks location

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winncstddomainusersetlocation.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Require domain users to elevate when setting a networks location Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

Microsoft Windows: Enable insecure guest logons

This test checks the setting for policy OpenVAS Vulnerability Test $Id: wininsecureguestlogons.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Enable insecure guest logons Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is...

Microsoft Windows: LAPS: Enable local admin password management

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winlapspasswdmanagement.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Enable local admin password management Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This...

Microsoft Windows: MSS: IP source routing protection level

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winmlipsourcerouting.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for MSS: DisableIPSourceRouting IP source routing protection level protects against packet spoofing Authors: Emanuel Moss Copyright: Copyright c 2018...

Microsoft Windows: Turn off multicast name resolution

This test checks the setting for policy OpenVAS Vulnerability Test $Id: windcmulticastnameresolution.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Turn off multicast name resolution Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This...

Microsoft Windows: LAPS: Password Settings: Password Age (Days)

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winlapspasswdage.nasl 11344 2018-09-12 06:57:52Z emoss $ Check value for Password Settings: Password Age Days Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is...

Microsoft Windows: MS Security Guide: Configure SMB v1 client driver

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winsgsmbv1clientdriver.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Configure SMB v1 client driver Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is...

Microsoft Windows: MS Security Guide: Apply UAC restrictions to local accounts on network logons

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winsguacrestrictionslocalaccounts.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Apply UAC restrictions to local accounts on network logons Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

Microsoft Windows: MSS: How often keep-alive packets are sent in milliseconds

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winmlkeepalivetime.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for MSS: KeepAliveTime How often keep-alive packets are sent in milliseconds Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

Microsoft Windows: Presence of LAPS AdmPwd GPO Extension / CSE

This test checks the presence of LAPS AdmPwd GPO Extension / CSE on Windows hosts at least Windows 8.1. The Local Administrator Password Solution LAPS tool, which is free and supported software that allows an organization to automatically set randomized and unique local Administrator account...

Microsoft Windows: MSS: How many times unacknowledged data is retransmitted

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winmltcpmaxdataretransmission.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for MSS: TcpMaxDataRetransmissions How many times unacknowledged data is retransmitted 3 recommended, 5 is default Authors: Emanuel Moss...

Microsoft Windows: MSS: Prevent the dial-up passsword from being saved

This test checks the setting for policy MSS: DisableSavePassword Prevent the dial-up passsword from being saved recommended OpenVAS Vulnerability Test $Id: winmldialuppasswdsaved.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for MSS: DisableSavePassword Prevent the dial-up passsword from...

Microsoft Windows: MSS: Ignore NetBIOS name release requests except from WINS servers

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winmlnonamereleaseondemand.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for MSS: NoNameReleaseOnDemand Allow the computer to ignore NetBIOS name release requests except from WINS servers Authors: Emanuel Moss Copyright...

Microsoft Windows: LAPS: password expiration not longer than required by policy

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winlapspasswordexpiration.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Do not allow password expiration time longer than required by policy Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...