159 matches found
Microsoft Message Queuing (MSMQ) RCE Vulnerability (951071) - Active Check
This host is missing important security update according to Microsoft Bulletin MS08-065. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Microsoft Windows Message Queuing Privilege Escalation Vulnerability (971032)
This host is missing a critical security update according to Microsoft Bulletin MS09-040. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
CVE-2009-1922
The Message Queuing aka MSMQ service for Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP2, and Vista Gold does not properly validate unspecified IOCTL request data from user mode before passing this data to kernel mode, which allows local users to gain privileges via a crafted request, aka "MS...
CVE-2009-1922
The CVE-2009-1922 entry concerns Microsoft Windows Message Queuing (MSMQ) Privilege Escalation affecting Windows 2000 SP4, XP SP2, Server 2003 SP2, and Vista. The root cause is improper validation of IOCTL request data in the MSMQ IOCTL handler (mqac.sys) as data moves from user mode to kernel mo...
Microsoft Windows MSMQ (message queuing) privilege escalation
DoS conditions in the service lead to named channel spoofing possibility...
[PT-2008-09] Microsoft Windows MSMQ Privilege Escalation Vulnerability
---------------------------------------------------------------------- PT-2008-09 Positive Technologies Security Advisory Microsoft Windows MSMQ Privilege Escalation Vulnerability ---------------------------------------------------------------------- --- Affected Software Microsoft Windows 2000...
CVE-2009-1922: Undefined Security Weakness
The Message Queuing aka MSMQ service for Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP2, and Vista Gold does not properly validate unspecified IOCTL request data from user mode before passing this data to kernel mode, which allows local users to gain privileges via a crafted request, aka "MS...
Message Queuing Remote Code Execution Vulnerability (951071)
This host is missing important security update according to Microsoft Bulletin MS08-065. OpenVAS Vulnerability Test $Id: secpodms08-065900224.nasl 5344 2017-02-18 17:43:17Z cfi $ Description: Message Queuing Remote Code Execution Vulnerability 951071 Authors: Veerendra GG Copyright: Copyright C...
Microsoft Security Bulletin MS08-065 – Important Vulnerability in Message Queuing Could Allow Remote Code Execution (951071)
Microsoft Security Bulletin MS08-065 – Important Vulnerability in Message Queuing Could Allow Remote Code Execution 951071 Published: October 14, 2008 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability in the Message Queuing Service...
CVE-2008-3479
CVE-2008-3479 is a remote code execution vulnerability in the Microsoft Message Queuing (MSMQ) service (mqsvc.exe) on Windows 2000 SP4 . The issue stems from a heap-based overflow caused by improper processing/parsing of an RPC request to MSMQ, allowing an unauthenticated, network-based attacker ...
Microsoft Message Queuing Service RPC Query Heap Corruption Vulnerability
Description The Microsoft Message Queuing service MSMQ is prone to a remote heap-corruption vulnerability. An attacker can exploit this issue to execute arbitrary code with SYSTEM-level privileges, facilitating the complete compromise of an affected computer. Failed exploit attempts will result i...
Microsoft Windows PGM Invalid Length Remote Denial Of Service Vulnerability
Description Microsoft Windows is prone to a remote denial-of-service vulnerability because it fails to adequately handle specially crafted PGM Pragmatic General Multicast network traffic. Attackers can exploit this issue to cause an affected computer to stop responding until it is manually...
MS08-036: Vulnerabilities in Pragmatic General Multicast (PGM) Could Allow Denial of Service (950762)
The remote version of Windows is affected by a vulnerability in the Pragmatic General Multicast protocol installed with the MSMQ service. An attacker may exploit this flaw to crash the remote host remotely. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid33137;...
PT-2008-09: Microsoft Windows MSMQ Privilege Escalation Vulnerability
Positive Technologies Research Team has discovered a privilege escalation vulnerability in Windows Message Queuing service MSMQ. The IOCTL handler in mqac.sys does not properly validate buffer data associated with the Irp object, which allows local users to crash the system or execute arbitrary...
Microsoft Windows XP Pragmatic General Multicast memory corruption
Memory corruption on parsing multicast PGM message if Microsoft Message Queuing Services MSMQ service is installed...
Microsoft PGM vulnerable to remote code execution
Overview A buffer overflow vulnerability in Microsoft's Pragmatic General Multicast PGM protocol implementation may allow an attacker to execute arbitrary code. Description The Pragmatic General Multicast PGM protocol is an experimental protocol defined in RFC 3208. Microsoft's implementation of...
Microsoft Windows Message Queuing Remote Buffer Overflow Vulnerability
Description A remote buffer overflow vulnerability affects Microsoft Windows. This issue is due to a failure of the affected functionality to properly validate the length of user-supplied strings prior to copying them into static process buffers. This vulnerability may be exploited over RPC. An...
MS05-017: Vulnerability in MSMQ Could Allow Code Execution (892944)
The remote version of Windows is affected by a vulnerability in Microsoft Message Queuing Service MSMQ. An attacker could exploit this flaw to execute arbitrary code on the remote host with the SYSTEM privileges. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid18021;...
MS05-017: Vulnerability in MSMQ Could Allow Code Execution (892944) (uncredentialed check)
The remote version of Windows is affected by a vulnerability in Microsoft Message Queuing Service MSMQ. An attacker may exploit this flaw to execute arbitrary code on the remote host with SYSTEM privileges. C Tenable Network Security, Inc. Windows XP SP1 can be identified remotely without harm, n...