3145 matches found
evolution-data-server: insufficient checking of NTLM authentication challenge packets
The ntlmchallenge function in the NTLM SASL authentication mechanism in camel/camel-sasl-ntlm.c in Camel in Evolution Data Server aka evolution-data-server 2.24.5 and earlier, and 2.25.92 and earlier 2.25.x versions, does not validate whether a certain length value is consistent with the amount o...
evolution-data-server: insufficient checking of NTLM authentication challenge packets
The ntlmchallenge function in the NTLM SASL authentication mechanism in camel/camel-sasl-ntlm.c in Camel in Evolution Data Server aka evolution-data-server 2.24.5 and earlier, and 2.25.92 and earlier 2.25.x versions, does not validate whether a certain length value is consistent with the amount o...
Microsoft Windows MS04-011 Security Check
Windows operating system are affected to multiple remote code execution RCE and privileges escalation vulnerabilities. SPDX-FileCopyrightText: 2009 Christian Eric Edjenguele Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
mks_vir 9b < 1.2.0.0b297 (mksmonen.sys) Privilege Escalation Exploit
No description provided by source. //////////////////////////////////////////////////////////////////////////////////// // +----------------------------------------------------------------------------+ // // | | // // | MKS Sp. z o. o. - http://www.mks.com.pl/ | // // | | // // | Affected Softwar...
mks_vir 9b 1.2.0.0b297 - mksmonen.sys Local Privilege Escalation
mksvir 9b 1.2.0.0b297 - mksmonen.sys Local Privilege Escalation //////////////////////////////////////////////////////////////////////////////////// // +----------------------------------------------------------------------------+ // // | | // // | MKS Sp. z o. o. - http://www.mks.com.pl/ | // //...
mks_vir 9b < 1.2.0.0b297 (mksmonen.sys) Privilege Escalation Exploit
Exploit for unknown platform in category local exploits ==================================================================== mksvir 9b 1.2.0.0b297 mksmonen.sys Privilege Escalation Exploit ====================================================================...
mks_vir 9b < 1.2.0.0b297 - 'mksmonen.sys' Local Privilege Escalation
//////////////////////////////////////////////////////////////////////////////////// // +----------------------------------------------------------------------------+ // // | | // // | MKS Sp. z o. o. - http://www.mks.com.pl/ | // // | | // // | Affected Software: | // // | mksvir 9 BETA 1.2.0.0 ...
FileMaker Pro User Password Disclosure Vulnerability
The remote Filemaker database server is prone to User Password Disclosure Vulnerability, because it does not properly secure credentials during authentication. OpenVAS Vulnerability Test $Id: remote-detect-filemaker-pwd-disclosure.nasl 8022 2017-12-07 08:23:28Z teissa $ Description: FileMaker Pro...
Fedora Update for rdesktop FEDORA-2008-3886
Check for the Version of rdesktop OpenVAS Vulnerability Test Fedora Update for rdesktop FEDORA-2008-3886 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
Fedora Update for rdesktop FEDORA-2008-3985
Check for the Version of rdesktop OpenVAS Vulnerability Test Fedora Update for rdesktop FEDORA-2008-3985 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
WFTPD Pro Server 3.30.0.1 Denial Of Service
/\ Title: WFTPD Pro Server 3.30.0.1 pre auth Multiple Remote Denial of Service Vulnerabilities Summary: Professional FTP server for Windows NT / 2000 / XP / 2003 Desc: WFTPD Pro Server 3.30.0.1 suffers from multiple remote vulnerabilities which resolves in denial of service. Several commands are...
WFTPD Pro Server 3.30.0.1 (pre auth) Multiple Remote Denial of Service Vulnerabilities
Summary Professional FTP server for Windows NT / 2000 / XP / 2003. Description WFTPD Pro Server 3.30.0.1 suffers from multiple remote vulnerabilities which resolves in denial of service. Several commands are vulnerable including: LIST, MLST, NLST, NLST -al, STAT and maybe more. This issue is...
Upload command to Startup folder
Added: 01/20/2009 Background Each user's Startup folder on Windows systems contains programs which run at start-up time. This tool attempts to upload a command connection to a user's Startup folder. If successful, the connection will be established the next time the computer starts. Limitations A...
Microsoft Windows SMB NT Trans请求缓冲区溢出漏洞（MS09-001）
BUGTRAQ ID: 33121 CVECAN ID: CVE-2008-4834 Windows是微软发布的非常流行的操作系统。 Microsoft服务器消息块（SMB）协议软件处理特制SMB数据包的方式存在缓冲区溢出漏洞，未经认证的远程攻击者可以在NT Trans请求中指定畸形的值导致内核忙碌，必须重启系统才能恢复操作。利用此漏洞的大多数尝试会导致系统拒绝服务，但是远程执行代码在理论上是可行的。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Server 2003 SP2 Microsoft...
Microsoft Windows SMB NT Trans2请求远程拒绝服务及代码执行漏洞（MS09-001）
BUGTRAQ ID: 33122 CVECAN ID: CVE-2008-4835 Windows是微软发布的非常流行的操作系统。 Microsoft服务器消息块（SMB）协议软件处理特制SMB数据包的方式存在安全漏洞，未经认证的远程攻击者可以在NT Trans2请求中指定畸形的值导致内核忙碌，必须重启系统才能恢复操作。利用此漏洞的大多数尝试会导致系统拒绝服务，但是远程执行代码在理论上是可行的。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Vista SP1 Microsoft Windows...
Remote code execution
Buffer overflow in SMB in the Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2 allows remote attackers to execute arbitrary code via malformed values of unspecified "fields inside the SMB packets" in an NT Trans request, aka "SMB Buffer Overflow Remote Cod...
Remote code execution
SMB in the Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote attackers to execute arbitrary code via malformed values of unspecified "fields inside the SMB packets" in an NT Trans2 request, related to...
CVE-2008-4835
SMB in the Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote attackers to execute arbitrary code via malformed values of unspecified "fields inside the SMB packets" in an NT Trans2 request, related to...
ZDI-09-002: Microsoft SMB NT Trans2 Request Parsing Remote Code Execution Vulnerability
ZDI-09-002: Microsoft SMB NT Trans2 Request Parsing Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-09-002 January 13, 2009 -- CVE ID: CVE-2008-4835 -- Affected Vendors: Microsoft -- Affected Products: Microsoft Windows Server 2008 Microsoft Windows Vista...
Microsoft SMB NT Trans2 Request Parsing Remote Code Execution Vulnerability
This vulnerability allows remote attackers to trigger a denial of service condition on vulnerable installations of Microsoft Windows; remote code execution is also theoretically possible. User interaction is not required to exploit this vulnerability. The specific flaw exists in the processing of...