Incorrect Permission Assignment for Critical Resource

Overview Affected versions of this package are vulnerable to Incorrect Permission Assignment for Critical Resource in the form of permissive file permissions on /usr/local/bin/nps and /usr/bin/nps. An attacker can overwrite these executable files. Remediation Upgrade...

freunde.obi.de XSS vulnerability

Open Bug Bounty ID: OBB-601078 Description| Value ---|--- Affected Website:| freunde.obi.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Authentication flaw

SafeNet Authentication Service for NPS Agent uses a weak ACL for unspecified installation directories and executable modules, which allows local users to gain privileges by modifying an executable module...

CVE-2015-7964

SafeNet Authentication Service for NPS Agent uses a weak ACL for unspecified installation directories and executable modules, which allows local users to gain privileges by modifying an executable module...

CVE-2015-7964

Technical details for CVE-2015-7964 are not publicly available in the provided connected documents; no affected products, vulnerable components, or mitigations are specified here. Monitor for updates.

September 12, 2017—KB4038793 (Security-only update)

None None...

Microsoft Windows Multiple Vulnerabilities (KB4038788)

This host is missing a critical security update according to Microsoft KB4038788 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Multiple Vulnerabilities (KB4038792)

This host is missing a critical security update according to Microsoft KB4038792 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

September 12, 2017—KB4038792 (OS Build Monthly Rollup)

None None...

Intrusion Detection Avoidance Payload Generator: NPS_Payload

This script will generate payloads for basic intrusion detection avoidance. It utilizes publicly demonstrated techniques from several different sources. Written by Larry Spohn @Spoonman1091 Payload written by Ben Mauch @Ben0xA aka dirtyben. This tool provides a way to generate a PowerShell payloa...

CVE-2016-0050

Network Policy Server NPS in Microsoft Windows Server 2008 SP2 and R2 SP1 and Server 2012 Gold and R2 misparses username queries, which allows remote attackers to cause a denial of service RADIUS authentication outage via crafted requests, aka "Network Policy Server RADIUS Implementation Denial o...

CVE-2016-0050

CVE-2016-0050 denotes a DoS in Microsoft Network Policy Server (NPS) caused by misparsing/ improper handling of RADIUS username strings in authentication requests. A remote, unauthenticated attacker can exploit crafted username inputs to trigger a denial-of-service condition on NPS, affecting Win...

Microsoft Windows NPS RADIUS Server Denial of Service Vulnerability (3133043)

This host is missing an important security update according to Microsoft Bulletin MS16-021 SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS16-021: Security update for NPS RADIUS server to address denial of service: February 9, 2016

None None...

Cumulative update for Windows 10: February 9, 2016

None None...

Cumulative update for Windows 10 Version 1511: February 9, 2016

None None...

Denial of service

Microsoft Windows Server 2003 SP2, Server 2008 SP2 and R2 SP1, and Server 2012 Gold and R2 allow remote attackers to cause a denial of service system hang and RADIUS outage via crafted username strings to 1 Internet Authentication Service IAS or 2 Network Policy Server NPS, aka "Network Policy...

CVE-2015-0015

Microsoft Windows Server 2003 SP2, Server 2008 SP2 and R2 SP1, and Server 2012 Gold and R2 allow remote attackers to cause a denial of service system hang and RADIUS outage via crafted username strings to 1 Internet Authentication Service IAS or 2 Network Policy Server NPS, aka "Network Policy...

Microsoft Network Policy Server RADIUS Denial of Service (MS15-007; CVE-2015-0015)

A denial of service vulnerability exists in the Network Policy Server NPS. The vulnerability is due to the way the NPS handles username strings. A remote attacker can exploit this issue by sending a specially crafted username string to the NPS...

Xxe

nps/servlet/webacc in iManager in the Administration Console server in NetIQ Access Manager NAM 4.x before 4.0.1 HF3 allows remote authenticated novlwww users to read arbitrary files via a query parameter containing an XML external entity declaration in conjunction with an entity reference, relat...