CVE-2008-3010

Microsoft Windows Media Player 6.4, Windows Media Format Runtime 7.1 through 11, and Windows Media Services 4.1 and 9 incorrectly associate ISATAP addresses with the Local Intranet zone, which allows remote servers to capture NTLM credentials, and execute arbitrary code through...

Design/Logic Flaw

Microsoft Windows Media Player 6.4, Windows Media Format Runtime 7.1 through 11, and Windows Media Services 4.1, 9, and 2008 do not properly use the Service Principal Name SPN identifier when validating replies to authentication requests, which allows remote servers to execute arbitrary code via...

CVE-2008-3010

CVE-2008-3010 relates to ISATAP handling in Windows Media components (Windows Media Player 6.4, Windows Media Format Runtime 7.1–11, Windows Media Services 4.1 and 9) where ISATAP addresses are misclassified in the Local Intranet zone, risking NTLM credential leakage and potential remote code exe...

CVE-2008-3009

Microsoft Windows Media Player 6.4, Windows Media Format Runtime 7.1 through 11, and Windows Media Services 4.1, 9, and 2008 do not properly use the Service Principal Name SPN identifier when validating replies to authentication requests, which allows remote servers to execute arbitrary code via...

CVE-2008-3010

Microsoft Windows Media Player 6.4, Windows Media Format Runtime 7.1 through 11, and Windows Media Services 4.1 and 9 incorrectly associate ISATAP addresses with the Local Intranet zone, which allows remote servers to capture NTLM credentials, and execute arbitrary code through...

Vulnerabilities in Windows Media Components Could Allow Remote Code Execution (959807)

This host is missing a critical security update according to Microsoft Bulletin MS08-076. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows Media Player multiple security vulnerabilities

NTLM credentials leak and relaying...

Vulnerabilities in Windows Media Components Could Allow Remote Code Execution (959807)

This host is missing a critical security update according to Microsoft Bulletin MS08-076. OpenVAS Vulnerability Test $Id: secpodms08-076.nasl 5863 2017-04-05 07:38:11Z antu123 $ Vulnerabilities in Windows Media Components Could Allow Remote Code Execution 959807 Authors: Chandan S Updated By:...

SmbRelay3 NTLM Replay Attack Tool/Exploit (MS08-068)

No description provided by source. SMBRELAY 3 - NTLM replay attack version 1.0 public version c 2008 Andres Tarasco Acuña atarasco at gmail.com URL: http://tarasco.org/Web/tools.html http://milw0rm.com/sploits/2008-smbrelay3.zip http://exploit-db.com/sploits/2008-smbrelay3.zip...

SmbRelay3 NTLM Replay Attack Tool/Exploit (MS08-068)

Exploit for unknown platform in category remote exploits ==================================================== SmbRelay3 NTLM Replay Attack Tool/Exploit MS08-068 ==================================================== SMBRELAY 3 - NTLM replay attack version 1.0 public version c 2008 Andres Tarasco...

Microsoft Windows - SmbRelay3 NTLM Replay (MS08-068)

Microsoft Windows - SmbRelay3 NTLM Replay MS08-068 SMBRELAY 3 - NTLM replay attack version 1.0 public version c 2008 Andres Tarasco Acuña atarasco at gmail.com URL: http://tarasco.org/Web/tools.html https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/7125.zip...

Microsoft Windows - SmbRelay3 NTLM Replay (MS08-068)

SMBRELAY 3 - NTLM replay attack version 1.0 public version c 2008 Andres Tarasco Acuña atarasco at gmail.com URL: http://tarasco.org/Web/tools.html https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/7125.zip 2008-smbrelay3.zip milw0rm.com 2008-11-14...

Microsoft Windows SMB凭据反射漏洞（MS08-068）

BUGTRAQ ID: 7385 CVECAN ID: CVE-2008-4037 Windows是微软发布的非常流行的操作系统。 当用户连接到攻击者的SMB服务器时，Microsoft服务器消息块（SMB）协议处理NTLM凭据的方式存在远程代码执行漏洞，允许攻击者重放用户凭据，并在登录用户的下文中执行代码。如果用户使用管理用户权限登录，成功利用此漏洞的攻击者便可完全控制受影响的系统。攻击者可随后安装程序；查看、更改或删除数据，或者创建拥有完全用户权限的新帐户。那些帐户被配置为拥有较少系统用户权限的用户比具有管理用户权限的用户受到的影响要小。 Microsoft Windows XP S...

CVE-2008-4037

Microsoft Windows 2000 Gold through SP4, XP Gold through SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote SMB servers to execute arbitrary code on a client machine by replaying the NTLM credentials of a client user, as demonstrated by backrush, aka "SMB Credential...

CVE-2008-4037

CVE-2008-4037 describes a remote code-execution condition in various Windows platforms where SMB servers can replay NTLM credentials to a client, enabling arbitrary code execution (SMB Credential Reflection). The issue, demonstrated by backrush, is part of the SMB relay/credential reflection fami...

SMB Could Allow Remote Code Execution Vulnerability (957097)

This host is missing a critical security update according to Microsoft Bulletin MS08-068. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

SMB Could Allow Remote Code Execution Vulnerability (957097)

This host is missing a critical security update according to Microsoft Bulletin MS08-068. OpenVAS Vulnerability Test $Id: secpodms08-068900057.nasl 5934 2017-04-11 12:28:28Z antu123 $ Description: SMB Could Allow Remote Code Execution Vulnerability 957097 Authors: Chandan S Copyright: Copyright C...

Microsoft Windows SMB Credential Reflection Remote Code Execution (MS08-068; CVE-2008-4037)

SMB reflection attacks is a type of "Man-in-the-Middle" MITM attack in which an attacker reflects the clients SMB challenge back to the client and by that bypass security, allowing the attacker to execute code in the context of the logged-on user. A remote code execution vulnerability has been...

Gentoo Security Advisory GLSA 200501-25 (squid)

The remote host is missing updates announced in advisory GLSA 200501-25. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD Ports: squid

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...