562 matches found
system-config-printer: possible arbitrary code execution in pysmb.py due to improper escaping of hostnames
pysmb.py in system-config-printer 0.6.x and 0.7.x, as used in foomatic-gui and possibly other products, allows remote SMB servers to execute arbitrary commands via shell metacharacters in the 1 NetBIOS or 2 workgroup name, which are not properly handled when searching for network printers...
Moderate: Red Hat Security Advisory: system-config-printer security update
Updated system-config-printer packages that fix one security issue are now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...
NetBIOS Name Service Spoofer
This module forges NetBIOS Name Service NBNS responses. It will listen for NBNS requests sent to the local subnet's broadcast address and spoof a response, redirecting the querying machine to an IP of the attacker's choosing. Combined with auxiliary/server/capture/smb or...
SWAT Samba Web Administration Tool Cross-Site Request Forgery PoC
No description provided by source. !-- Secur-I Research Group - Proof-of-Concept ========================================================================== Title: Cross-Site Request Forgery in SWAT Samba Web Administration Tool Vulnerable versions: Samba 3.0.x - 3.5.9 inclusive Fixed version: Sam...
broadcast-netbios-master-browser NSE Script
Attempts to discover master browsers and the domains they manage. Example Usage nmap --script=broadcast-netbios-master-browser Script Output | broadcast-netbios-master-browser: | ip server domain |10.0.200.156 WIN2K3-EPI-1 WORKGROUP Requires netbios nmap stdnse tab local netbios = require "netbio...
Nmap NSE net: nbstat
Attempts to retrieve the target's NetBIOS names and MAC address. By default, the script displays the name of the computer and the logged-in user; if the verbosity is turned up, it displays all names the system thinks it owns. OpenVAS Vulnerability Test $Id: gbnmapnbstatnet.nasl 5499 2017-03-06...
WINS Server Detection
The remote service is a WINS Windows Internet Name Service server, which holds information about any NetBIOS-enabled hosts on the network. Note that the service may allow an arbitrary user to download the list, although some versions eg, in Windows 2008 require an IP address to be specifically...
Microsoft Windows Internet Name Service (WINS)失败响应远程代码执行漏洞
Bugtraq ID: 47730 Microsoft Windows是一款微软发行的操作系统。 Microsoft Windows 2003 Server分发的wins.exe服务存在缺陷。此服务设计用于解析NetBIOS请求，并接收42端口的连接，当处理套接字发送异常时存在一个逻辑错误，部分用户提供的值会遗留在栈帧中，并在其他上下文中重用。远程攻击者可以利用这个缺陷调用LeaveCriticalSection，并在一个可控的位置上进行操作。这个条件可导致远程代码在SYSTEM用户上下文执行。 Microsoft Windows Server 2003 Datacenter Editi...
Microsoft WINS Service Failed Response Memory Corruption (MS11-035; CVE-2011-1248)
Windows Internet Naming Service WINS was designed specifically to support NetBIOS over TCP/IP NetBT, and is required for any environment in which users access resources that have NetBIOS names. A remote code execution vulnerability has been discovered in Microsoft WINS. The vulnerability is due t...
Microsoft WINS Service Failed Response Memory Corruption Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Windows Internet Name Service WINS. Authentication is not required to exploit this vulnerability. The specific flaw exists within the wins.exe service distributed with Microsoft Windows...
UDP Service Sweeper
Detect interesting UDP services This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'openssl' class MetasploitModule 'UDP Service Sweeper', 'Description' = 'Detect interesting UDP services', 'Author' = 'hdm',...
Link-Local Multicast Name Resolution (LLMNR) Detection
The remote device answered to a Link-local Multicast Name Resolution LLMNR request. This protocol provides a name lookup service similar to NetBIOS or DNS. It is enabled by default on modern Windows versions. TRUSTED...
[SECURITY] Fedora 14 Update: samba-3.5.8-74.fc14
Samba is the suite of programs by which a lot of PC-related machines share files, printers, and other information such as lists of available files and printers. The Windows NT, OS/2, and Linux operating systems support this natively, and add-on packages can enable the same thing for DOS, Windows,...
[SECURITY] Fedora 13 Update: samba-3.5.8-74.fc13
Samba is the suite of programs by which a lot of PC-related machines share files, printers, and other information such as lists of available files and printers. The Windows NT, OS/2, and Linux operating systems support this natively, and add-on packages can enable the same thing for DOS, Windows,...
Windows Manage Local User Account Deletion
This module deletes a local user account from the specified server, or the local machine if no server is given. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Windows Manage Local User Account...
Nmap NSE: NetBIOS Stat
This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Nmap NSE: NetBIOS Stat
This script attempts to retrieve the remote system's NetBIOS names and MAC address. This is a wrapper on the Nmap Security Scanner's http://nmap.org nbstat.nse. OpenVAS Vulnerability Test $Id: gbnmapnbstat.nasl 7006 2017-08-25 11:51:20Z teissa $ Wrapper for Nmap NetBIOS Stat NSE script. Authors:...
NetBios Host Information
Binary data 7240.pasl...
Samba WINS Server Name Registration Handling Stack Buffer Overflow (CVE-2007-5398)
Samba is an open-source implementation of the file, print, and other network services suite known as SMB/CIFS Server Message Block/Common Internet File System. A stack-based buffer overflow vulnerability exists in the way Samba handles WINS messages. The vulnerability is due to a boundary error...