CVE-2011-2012

Microsoft Forefront UAG 2010 Gold/Update 1/2 and SP1 is affected by CVE-2011-2012 due to improper validation of session cookies, enabling a remote attacker to cause a denial of service (IIS outage) by sending unspecified network traffic. This is part of the MS11-079 set of vulnerabilities and is ...

MS11-079: Vulnerabilities in Microsoft Forefront Unified Access Gateway Could Cause Remote Code Execution (2544641)

The version of Forefront Unified Access Gateway UAG running on the remote host has multiple vulnerabilities in the Web Monitor component : - An HTTP response splitting vulnerability in ExcelTable.asp. CVE-2011-1895 - A reflected XSS in ExcelTable.asp. CVE-2011-1896 - A reflected XSS in Default.as...

Symantec Veritas Storage Foundation Scheduler Service NULL Session Authentication Bypass Vulnerability

This vulnerability allows an attacker to execute arbitrary code on vulnerable installations of Symantec Veritas Storage Foundation. User interaction is not required to exploit this vulnerability. Authentication is not required to exploit this vulnerability. The specific flaw exists in the...

SMB NULL Session Authentication

The remote host is running and SMB protocol. It is possible to log into the browser or spoolss pipes using a NULL session i.e., with no login or password. Depending on the configuration, it may be possible for an unauthenticated, remote attacker to leverage this issue to get information about the...

Microsoft Windows - 'NetrWkstaUserEnum()' Remote Denial of Service

!/usr/bin/python MS Windows Workstation Service NetrWkstaUserEnum 0day Memory Allocation Remote DoS Exploit Bug discovered by h07 Tested on:.. - Windows XP SP2 Polish - Windows 2000 SP4 Polish + All Microsoft Security Bulletins Example: wksdos.py 192.168.0.2 512 MS Windows NetrWkstaUserEnum 0day...

CVE-2005-3034

Compuware DriverStudio Remote Control service DSRsvc.exe 2.7 and 3.0 beta 2 allows remote attackers to bypass authentication via a null session...

CVE-2005-3034

CVE-2005-3034 affects the Compuware DriverStudio Remote Control service (DSRsvc.exe) versions 2.7 and 3.0 beta 2. The root cause is an authentication bypass through a null session, enabling remote attackers to access the service without valid credentials. The CVE is documented across multiple sou...

CVE-2005-3034

Compuware DriverStudio Remote Control service DSRsvc.exe 2.7 and 3.0 beta 2 allows remote attackers to bypass authentication via a null session...

NuMega SoftICE Driver Studio authentication bypass

It's posible to access DriverStudio Remote Control with NTLM Null session...

Microsoft Windows SMB Service Enumeration via \srvsvc

This plugin connects to \srvsvc instead of \svcctl to enumerate the list of services running on the remote host on top of a NULL session. An attacker may use this feature to gain better knowledge of the remote host. C Tenable Network Security, Inc. Thanks to: Jean-Baptiste Marchand of Herve Schau...

[Full-disclosure] RealVNC/WinVNC Multiple vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Two simple vulnerabilities wich may lead to an os guess + null session + several others infos while scanning port 5900, low risk on paper but high online risk: My 2cent suggestion to the realvnc team would be to totally remove this "No Authentication"...

ms04-031 pre-auth ??

http://www.microsoft.com/technet/security/bulletin/ms04-031.mspx We have located the vulnerable function and just recently wrote the CANVAS module for it but all our tests showed that the NetDDE vulnerability can not be exploited with a NULL session a.k.a with "Anonymous Logon" credentials. Here...

MS SMTP NULL Session Mail Relay

Binary data 2040.prm...

MS Windows RPC Locator Service Remote Exploit

Exploit for unknown platform in category remote exploits ============================================= MS Windows RPC Locator Service Remote Exploit ============================================= / rpcexp.c RPC LOCATOR Exploit Autor: Marcin Wolak mail: email protected Last update: 30 march 2003 / ...

CVE-2002-0054

CVE-2002-0054 affects the SMTP service in Windows 2000 and the Internet Mail Connector (IMC) in Exchange Server 5.5. The issue stems from improper handling of NTLM authentication responses, enabling remote attackers to relay mail via SMTP AUTH using a null session. Public references describe this...

Microsoft Windows SMTP Service NTLM Null Session Authorization Bypass (uncredentialed check)

It is possible to authenticate to the remote SMTP service by logging in with a NULL session. An attacker may use this flaw to use your SMTP server as a spam relay. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid11308; scriptversion"1.29"; scriptcvsdate"Date: 2018/11/...

Microsoft Windows XP2000NT 4.0 - Network Share Provider SMB Request Buffer Overflow (1)

Microsoft Windows XP2000NT 4.0 - Network Share Provider SMB Request Buffer Overflow 1 // source: https://www.securityfocus.com/bid/5556/info Microsoft Windows operating systems use the Server Message Block SMB protocol to support services such as file and printer sharing. A buffer overflow...

Microsoft Windows XP2000NT 4.0 - Network Share Provider SMB Request Buffer Overflow (2)

Microsoft Windows XP2000NT 4.0 - Network Share Provider SMB Request Buffer Overflow 2 source: https://www.securityfocus.com/bid/5556/info Microsoft Windows operating systems use the Server Message Block SMB protocol to support services such as file and printer sharing. A buffer overflow...

Microsoft Windows XP/2000/NT 4.0 - Network Share Provider SMB Request Buffer Overflow (2)

source: https://www.securityfocus.com/bid/5556/info Microsoft Windows operating systems use the Server Message Block SMB protocol to support services such as file and printer sharing. A buffer overflow vulnerability has been reporting in the handling of some malformed SMB requests. An attacker ma...

Microsoft Windows XP/2000/NT 4.0 - Network Share Provider SMB Request Buffer Overflow (1)

// source: https://www.securityfocus.com/bid/5556/info Microsoft Windows operating systems use the Server Message Block SMB protocol to support services such as file and printer sharing. A buffer overflow vulnerability has been reporting in the handling of some malformed SMB requests. An attacker...