CVE-2019-11029

Mirasys VMS before V7.6.1 and 8.x before V8.3.2 mishandles the Download method of AutoUpdateService in SMServer.exe, leading to Directory Traversal. An attacker could use ..\ with this method to iterate over lists of interesting system files and download them without previous authentication. This...

IBM finally about 9 months before the discovery of the serious vulnerabilities published mitigation scenarios! But white hat heart wronged-vulnerability warning-the black bar safety net

! Recently, IBM finally for its software product in 9 months ago was discovered a serious vulnerability released a fix it solution, the vulnerability exists in the IBM enterprise backup software, using the vulnerability, an attacker from the local network of the IBM spectrum series data storage a...

Microsoft Windows SAM and LSAD Privilege Elevation Vulnerability (3148527)

This host is missing an important security update according to Microsoft Bulletin MS16-047 SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS16-047: Security Update for SAM and LSAD Remote Protocols (3148527) (Badlock) (uncredentialed check)

The remote Windows host is affected by an elevation of privilege vulnerability in the Security Account Manager SAM and Local Security Authority Domain Policy LSAD protocols due to improper authentication level negotiation over Remote Procedure Call RPC channels. A man-in-the-middle attacker able ...

samba: SAMR and LSA man in the middle attacks

A protocol flaw, publicly referred to as Badlock, was found in the Security Account Manager Remote Protocol MS-SAMR and the Local Security Authority Domain Policy Remote Protocol MS-LSAD. Any authenticated DCE/RPC connection that a client initiates against a server could be used by a...

samba: SAMR and LSA man in the middle attacks

A protocol flaw, publicly referred to as Badlock, was found in the Security Account Manager Remote Protocol MS-SAMR and the Local Security Authority Domain Policy Remote Protocol MS-LSAD. Any authenticated DCE/RPC connection that a client initiates against a server could be used by a...

Samba 4.2.x < 4.2.10 Multiple Vulnerabilities (Badlock)

Binary data 9231.prm...

Microsoft Windows and Samba may allow spoofing of authenticated users ("Badlock")

Overview The Security Account Manager Remote SAMR and Local Security Authority Domain Policy LSAD protocols do not properly establish Remote Procedure Call RPC channels, which may allow any attacker to impersonate an authenticated user or gain access to the SAM database, or launch denial of servi...

MS16-047: Security update for SAM and LSAD remote protocols: April 12, 2016

Resolves a vulnerability in the SAM and LSAD remote protocols. The vulnerability could allow an attacker to gain access to the SAM database.Summary An elevation of privilege vulnerability exists in the Security Account Manager SAM and Local Security Authority Domain Policy LSAD remote protocols...

Windows Gather Local and Domain Controller Account Password Hashes

This will dump local accounts from the SAM Database. If the target host is a Domain Controller, it will dump the Domain Account Database using the proper technique depending on privilege level, OS and role of the host. This module requires Metasploit: https://metasploit.com/download Current sourc...

CVE-2002-1117

Veritas Backup Exec 8.5 and earlier requires that the "RestrictAnonymous" registry key for Microsoft Exchange 2000 must be set to 0, which enables anonymous listing of the SAM database and shares...

CVE-2002-1117: Undefined Security Weakness

Veritas Backup Exec 8.5 and earlier requires that the "RestrictAnonymous" registry key for Microsoft Exchange 2000 must be set to 0, which enables anonymous listing of the SAM database and shares...

Syskey reuses keystream

Overview Versions of SYSKEY in use prior to December, 1999 leave the SAM database vulnerable to cryptanalytic attacks. Description SYSKEY is a utility introduced in Microsoft Windows NT 4.0 service pack 3 to provide strong cryptographic protection to the SAM password database. The protection SYSK...