Microsoft Windows远程安装服务远程任意指令执行漏洞（MS06-077）

Microsoft Windows是微软发布的非常流行的操作系统。 Windows的远程安装服务（Remote Installation Service）的实现上存在漏洞，远程攻击者可能利用此漏洞在服务器上执行任意指令，从而完全控制系统。 RIS使能了一个TFTP服务，匿名用户可以利用此服务向服务器的任意位置上传任意文件，远程攻击者可以通过覆盖系统文件执行任意指令。 Microsoft Windows 2000SP4 如果您不能立刻安装补丁或者升级，SEBUG建议您采取以下措施以降低威胁： 配置TFTP服务为只读 在防火墙上过滤UDP/69端口 不需要的时候停止TFTP服务 厂商补丁：...

Microsoft RIS Server weak permissions

It's possible to write files via TFTP...

Microsoft Security Bulletin MS06-077 Vulnerability in Remote Installation Service Could Allow Remote Code Execution (926121)

Microsoft Security Bulletin MS06-077 Vulnerability in Remote Installation Service Could Allow Remote Code Execution 926121 Published: December 12, 2006 Version: 1.0 Summary Who Should Read this Document: Customers who use Microsoft Windows Impact of Vulnerability: Remote Code Execution Maximum...

RIS Installation Check

This plugin checks if the equipment was installed via RIS. OpenVAS Vulnerability Test $Id: risdetect.nasl 6056 2017-05-02 09:02:50Z teissa $ Description: RIS Installation Check Authors: Jeff Adams Copyright: Copyright C 2004 Jorge Pinto And Nelson Gomes This program is free software; you can...