Test if passfilt.dll is installed (win)

Test over WMI if passfilt.dll is installed and the necessary Registry entry set OpenVAS Vulnerability Test $Id: GSHBWMIPassfilt.nasl 7061 2017-09-05 11:50:40Z teissa $ Test over WMI if passfilt.dll is installed and the necessary Registry entry set Authors: Thomas Rotter Copyright: Copyright c 201...

Microsoft Windows SMB Last Logged On User Disclosure

By connecting to the remote host with the supplied credentials, Nessus was able to identify the username associated with the last successful logon. Microsoft documentation notes that interactive console logons change the DefaultUserName registry entry to be the last logged-on user. C Tenable...

DUC NO-IP weak encryption

Password is stored in world-readable registry entry in reversable encryption form...

[Full-disclosure] iDefense Security Advisory 01.09.07: Multiple Microsoft Products VML 'recolorinfo' Element Integer Overflow Vulnerability

Microsoft Windows VML Element Integer Overflow Vulnerability iDefense Security Advisory 01.09.07 http://labs.idefense.com/intelligence/vulnerabilities/ Jan 09, 2007 I. BACKGROUND VML is a component of the Extensible Markup Language XML that specifies vector images e.g., rectangles and ovals. This...

[Full-Disclosure] Lotus Notes URL argument injection vulnerability

OVERVIEW ======== Lotus Notes is a groupware/e-mail system developed by Lotus Software. Due to its security and collaboration features it's used particularly by large organizations, government agencies, etc. IBM estimates it is used by 60 million people. During the client-side Windows installatio...

How to remove .printer mapping (WAS RE: Permanently remove IIS printer mapping)

This is from another list I receive. It explains this scenario rather well. Keith --------------------------------------------------- All IIS Administrators Please Read this Immediately --------------------------------------------------- I wanted to get this out right away. More info to follow. O...

Microsoft Windows NT 4.0/4.0 SP1/4.0 SP2/4.0 SP3/4.0 SP4 - Server Operator to Administrator Privilege Escalation: System Key

// source: https://www.securityfocus.com/bid/182/info The default ACL over the HKEYLocalMachine\Software\Microsoft\Windows NT\CurrentVersion\Winlogon key "System" value includes an entry for Server Operators:Special. The Special setting allows Server Ops to "Set" this value. A malicious System...