MS10-100: Vulnerability in Consent User Interface Could Allow Elevation of Privilege (2442962)

The Consent User Interface UI component of the remote Windows host does not properly process a registry key that has been set to a specific value. An attacker who can log on locally to the affected system and has the 'Impersonate a client after authentication' user right SeImpersonatePrivilege ca...

SuSE 11 / 11.1 Security Update : glibc (SAT Patch Numbers 3392 / 3393)

This update of glibc fixes various bugs and security issues : - Decoding of the $ORIGIN special value in various LD environment variables allowed local attackers to execute code in context of e.g. setuid root programs, elevating privileges. This issue does not affect SUSE as an assertion triggers...

Microsoft Security Bulletin MS10-089 - Important Vulnerabilities in Forefront Unified Access Gateway (UAG) Could Allow Elevation of Privilege (2316074)

Microsoft Security Bulletin MS10-089 - Important Vulnerabilities in Forefront Unified Access Gateway UAG Could Allow Elevation of Privilege 2316074 Published: November 09, 2010 Version: 1.0 General Information Executive Summary This security update resolves four privately reported vulnerabilities...

SuSE 10 Security Update : glibc (ZYPP Patch Number 7201)

Several security issues were fixed : - Decoding of the $ORIGIN special value in various LD environment variables allowed local attackers to execute code in context of e.g. setuid root programs, elevating privileges. This issue does not affect SUSE as an assertion triggers before the respective co...

Microsoft Windows 32-bit Platforms Unspecified vulnerabilities

This host is prone to multiple unspecified vulnerabilities. OpenVAS Vulnerability Test $Id: gbmswindowsstuxnetunspecifiedvuln.nasl 7172 2017-09-18 11:07:34Z cfischer $ Microsoft Windows 32-bit Platforms Unspecified vulnerabilities Authors: Antu Sanadi Copyright: Copyright c 2010 Greenbone Network...

Immunity Canvas: MS_KBLAYOUT

Name| mskblayout ---|--- CVE| CVE-2010-2744 Exploit Pack| CANVAS Description| MSKBLAYOUT Notes| CVE Name: CVE-2010-2744 VENDOR: Microsoft Notes: This is one of the vulnerabilities used by the Stuxnet work to elevate its privileges on Windows XP and Windows 2000. It may cause some minor side effec...

Windows Kernel-Mode Drivers Privilege Elevation Vulnerabilities (981957)

This host is missing a critical security update according to Microsoft Bulletin MS10-073. OpenVAS Vulnerability Test $Id: secpodms10-073.nasl 5934 2017-04-11 12:28:28Z antu123 $ Windows Kernel-Mode Drivers Privilege Elevation Vulnerabilities 981957 Authors: Madhuri D Copyright: Copyright c 2010...

OpenType Font (OTF) Format Driver Privilege Elevation Vulnerabilities (2279986)

This host is missing a critical security update according to Microsoft Bulletin MS10-078. OpenVAS Vulnerability Test $Id: secpodms10-078.nasl 5361 2017-02-20 11:57:13Z cfi $ OpenType Font OTF Format Driver Privilege Elevation Vulnerabilities 2279986 Authors: Madhuri D Copyright c 2010 SecPod,...

Windows Local Procedure Call Privilege Elevation Vulnerability (2360937)

This host is missing a critical security update according to Microsoft Bulletin MS10-084. OpenVAS Vulnerability Test $Id: secpodms10-084.nasl 5361 2017-02-20 11:57:13Z cfi $ Windows Local Procedure Call Privilege Elevation Vulnerability 2360937 Authors: Madhuri D Copyright c 2010 SecPod,...

OpenType Font (OTF) Format Driver Privilege Elevation Vulnerabilities (2279986)

This host is missing a critical security update according to Microsoft Bulletin MS10-078. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Windows Local Procedure Call Privilege Elevation Vulnerability (2360937)

This host is missing a critical security update according to Microsoft Bulletin MS10-084. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Windows Kernel-Mode Drivers Privilege Elevation Vulnerabilities (981957)

This host is missing a critical security update according to Microsoft Bulletin MS10-073. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS OpenType CFF Parsing Vulnerability

Core Security - CoreLabsMS OpenType CFF Parsing Vulnerability 1. Advisory Information Title: MS OpenType CFF Parsing Vulnerability Advisory Id: CORE-2010-0624 Advisory URL: http://www.coresecurity.com/content/ms-opentype-cff-parsing-vulnerability Date published: 2010-10-12 Date of last update:...

Windows Client/Server Runtime Subsystem Privilege Elevation Vulnerability (2121546)

This host is missing a critical security update according to Microsoft Bulletin MS10-069. OpenVAS Vulnerability Test $Id: secpodms10-069.nasl 5361 2017-02-20 11:57:13Z cfi $ Windows Client/Server Runtime Subsystem Privilege Elevation Vulnerability 2121546 Authors: Madhuri D Copyright c 2010 SecPo...

Windows Client/Server Runtime Subsystem Privilege Elevation Vulnerability (2121546)

This host is missing a critical security update according to Microsoft Bulletin MS10-069. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Local Security Authority Subsystem Service Privilege Elevation Vulnerability (983539)

This host is missing a critical security update according to Microsoft Bulletin MS10-068. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS Local Security Authority Subsystem Service Privilege Elevation Vulnerability (983539)

This host is missing a critical security update according to Microsoft Bulletin MS10-068. OpenVAS Vulnerability Test $Id: secpodms10-068.nasl 5361 2017-02-20 11:57:13Z cfi $ MS Local Security Authority Subsystem Service Privilege Elevation Vulnerability 983539 Authors: Antu Sanadi Copyright:...

Microsoft Windows TCP/IP Privilege Elevation Vulnerabilities (978886)

This host is missing a critical security update according to Microsoft Bulletin MS10-058. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows Tracing Feature Privilege Elevation Vulnerabilities (982799)

This host is missing a critical security update according to Microsoft Bulletin MS10-059. OpenVAS Vulnerability Test $Id: secpodms10-059.nasl 5361 2017-02-20 11:57:13Z cfi $ Microsoft Windows Tracing Feature Privilege Elevation Vulnerabilities 982799 Authors: Antu Sanadi Copyright: Copyright c 20...

MS KB982316: Elevation of Privilege Using Windows Service Isolation Bypass

Windows Service Isolation can be bypassed on the remote host, resulting in the elevation of privileges. A local attacker could exploit this by leveraging the TAPI service to execute code as SYSTEM. A similar problem affects other Windows services that run as the NetworkService user e.g. IIS, SQL...