558 matches found
samba security, bug fix, and enhancement update
4.9.1-6 - related: 1703204 - Fix printing with smbspool as CUPS backend 4.9.1-5 - resolves: 1703204 - Fix smbspool krb5 authentication 4.9.1-4 - resolves: 1690222 - Fix --max-protocol documentation of smbclient - resolves: 1518353 - Fix 'net ads join -Uadmin@forestdomain' - resolves: 1696524 - Fi...
rdp-ntlm-info NSE Script
This script enumerates information from remote RDP services with CredSSP NLA authentication enabled. Sending an incomplete CredSSP NTLM authentication request with null credentials will cause the remote service to respond with a NTLMSSP message disclosing information to include NetBIOS, DNS, and ...
Cyberoam Transparent Authentication Suite 2.1.2.5 - 'NetBIOS Name' Denial of Service (PoC)
Exploit Title: Cyberoam Transparent Authentication Suite 2.1.2.5 - 'NetBIOS Name' Denial of Service PoC Discovery by: Victor MondragĆ³n Discovery Date: 2019-05-23 Vendor Homepage: https://www.cyberoam.com Software Link:...
Cyberoam Transparent Authentication Suite 2.1.2.5 - NetBIOS Name Denial of Service (PoC)
Cyberoam Transparent Authentication Suite 2.1.2.5 - NetBIOS Name Denial of Service PoC Exploit Title: Cyberoam Transparent Authentication Suite 2.1.2.5 - 'NetBIOS Name' Denial of Service PoC Discovery by: Victor MondragĆ³n Discovery Date: 2019-05-23 Vendor Homepage: https://www.cyberoam.com Softwa...
Cyberoam Transparent Authentication Suite 2.1.2.5 - (NetBIOS Name) Denial of Service Exploit
Exploit Title: Cyberoam Transparent Authentication Suite 2.1.2.5 - 'NetBIOS Name' Denial of Service PoC Discovery by: Victor MondragĆ³n Vendor Homepage: https://www.cyberoam.com Software Link: https://download.cyberoam.com/solution/optionals/i18n/CTAS%202.1.2.5%20Release.zip Tested Version: 2.1.2....
Cyberoam Transparent Authentication Suite 2.1.2.5 NetBIOS Name / FQDN DoS
Exploit Title: Cyberoam Transparent Authentication Suite 2.1.2.5 - 'Fully Qualified Domain Name' Denial of Service PoC Discovery by: Victor MondragĆ³n Discovery Date: 2019-05-23 Vendor Homepage: https://www.cyberoam.com Software Link:...
Arbitrary Code Execution
Samba is vulnerable to arbitrary code execution. A heap-based buffer overflow flaw was found in Samba's NetBIOS message block daemon nmbd. An attacker on the local network could use this flaw to send specially crafted packets that, when processed by nmbd, could possibly lead to arbitrary code...
Windows NetBIOS / SMB Remote Host Report Tag
Either SMB or NetBIOS was used to determine the the device's hostname. Note that this plugin creates a tag for the host but does not itself generate a report. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid118730; scriptversion"1.6";...
Microsoft Windows: NetBIOS Node Type
This test checks the setting for policy OpenVAS Vulnerability Test $Id: windcnetbiosnodetype.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for NetBIOS Node Type Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is free software;...
Microsoft Windows: MSS: Ignore NetBIOS name release requests except from WINS servers
This test checks the setting for policy OpenVAS Vulnerability Test $Id: winmlnonamereleaseondemand.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for MSS: NoNameReleaseOnDemand Allow the computer to ignore NetBIOS name release requests except from WINS servers Authors: Emanuel Moss Copyright...
Qualys Cloud Platform (VM, PC) 8.13 New Features
This new release of the Qualys Cloud Platform VM, PC, version 8.13, includes several new feature improvements across the apps such as the ability to test authentication records, as well as improvements to UDCās and report options in Qualys Policy Compliance. Feature Highlights Qualys Cloud Platfo...
CVE-2018-7445
A buffer overflow was found in the MikroTik RouterOS SMB service when processing NetBIOS session request messages. Remote attackers with access to the service can exploit this vulnerability and gain code execution on the system. The overflow occurs before authentication takes place, so it is...
CVE-2018-7445
A buffer overflow was found in the MikroTik RouterOS SMB service when processing NetBIOS session request messages. Remote attackers with access to the service can exploit this vulnerability and gain code execution on the system. The overflow occurs before authentication takes place, so it is...
MikroTik RouterOS SMB Buffer Overflow(CVE-2018-7445)
Advisory Information Title: MikroTik RouterOS SMB Buffer Overflow Advisory ID: CORE-2018-0003 Advisory URL: http://www.coresecurity.com/advisories/mikrotik-routeros-smb-buffer-overflow Date published: 2018-03-15 Date of last update: 2018-03-15 Vendors contacted: MikroTik Release mode:...
MikroTik RouterOS SMB Buffer Overflow
Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ MikroTik RouterOS SMB Buffer Overflow 1. Advisory Information Title: MikroTik RouterOS SMB Buffer Overflow Advisory ID: CORE-2018-0003 Advisory URL: http://www.coresecurity.com/advisories/mikrotik-routeros-smb-buffer-overflow Dat...
MikroTik RouterOS SMB Buffer Overflow
Advisory ID Internal CORE-2018-0003 1. Advisory Information Title: MikroTik RouterOS SMB Buffer Overflow Advisory ID: CORE-2018-0003 Advisory URL:https://www.coresecurity.com/core-labs/advisories/mikrotik-routeros-smb-buffer-overflow Date published: 2018-03-15 Date of last update: 2018-03-15...
Debian DLA-1226-1 : wireshark security update
It was discovered that wireshark, a network protocol analyzer, contained several vulnerabilities in the dissectors for CIP Safety, IWARPMPA, NetBIOS, Profinet I/O and AMQP, which result in denial of dervice or the execution of arbitrary code. For Debian 7 'Wheezy', these problems have been fixed ...
[SECURITY] [DLA 1226-1] wireshark security update
Package : wireshark Version : 1.12.1+g01b65bf-4+deb8u6deb7u8 CVE ID : CVE-2017-11408 CVE-2017-17083 CVE-2017-17084 CVE-2017-17085 It was discovered that wireshark, a network protocol analyzer, contained several vulnerabilities in the dissectors for CIP Safety, IWARPMPA, NetBIOS, Profinet I/O and...
SUSE SLED12 / SLES12 Security Update : wireshark (SUSE-SU-2017:3436-1)
This update for wireshark fixes the following issues : - CVE-2017-17083: NetBIOS dissector could crash. This was addressed in epan/dissectors/packet-netbios.c by ensuring that write operations are bounded by the beginning of a buffer. bsc1070727 - CVE-2017-17084: IWARPMPA dissector could crash...
SUSE-SU-2017:3436-1 Security update for wireshark
This update for wireshark fixes the following issues: - CVE-2017-17083: NetBIOS dissector could crash. This was addressed in epan/dissectors/packet-netbios.c by ensuring that write operations are bounded by the beginning of a buffer. bsc1070727 - CVE-2017-17084: IWARPMPA dissector could crash. Th...