Microsoft Windows: Prevent installation of devices also to already installed

This test checks the setting for policy OpenVAS Vulnerability Test $Id: windenydevicesalreadyinstalled.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Prevent installation of devices that match any of these device IDs: Also apply to matching devices that are already installed. Authors:...

Microsoft Windows: Prevent installation of devices (device setup classes)

This test checks the setting for policy OpenVAS Vulnerability Test $Id: windenydriverssetupclasses.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Prevent installation of devices using drivers that match these device setup classes Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbon...

Microsoft Windows: Turn off the Order Prints picture task

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winorderprintpictask.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Turn off the "Order Prints" picture task Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This...

Microsoft Windows: Recovering of BitLocker-protected fixed drives (Require AD Backup)

This policy setting allows you to control how BitLocker-protected fixed data drives are recovered in the absence of the required credentials. This policy setting is applied when you turn on BitLocker. The Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a...

Microsoft Windows: Turn off Internet Connection Wizard (if refers to Microsoft.com)

This test checks the setting for policy OpenVAS Vulnerability Test $Id: wininetconnectionwizard.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Turn off Internet Connection Wizard if URL connection is referring to Microsoft.com Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone...

Microsoft Windows: Recovering of BitLocker-protected fixed drives (Setup Wizard)

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winbitlockerrecoverywizard.nasl 11363 2018-09-12 13:46:05Z emoss $ Check value for Choose how BitLocker-protected fixed drives can be recovered: Omit recovery options from the BitLocker setup wizard Authors: Emanuel Moss...

Microsoft Windows: Hardware-based encryption: BitLockers software-based encryption

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winhwencryptionbitlocker.nasl 11363 2018-09-12 13:46:05Z emoss $ Check value for Configure use of hardware-based encryption for fixed data drives: Use BitLocker software-based encryption when hardware encryption is not...

Microsoft Windows: Turn off access to the Store

This policy setting specifies whether to use the Store service for finding an application to open a file with an unhandled file type or protocol association. When a user opens a file type or protocol that is not associated with any applications on the computer, the user is given the choice to...

Microsoft Windows: Continue experiences on this device

This test checks the setting for policy OpenVAS Vulnerability Test $Id: wincontinueexperiencedevice.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Continue experiences on this device Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This...

Security Bulletin: A Security Vulnerability has been fixed in IBM Security Privileged Identity Manager (CVE-2016-5964)

Summary IBM Security Privileged Identity Manager Virtual Appliance uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. Vulnerability Details CVEID: CVE-2016-5964 DESCRIPTION: IBM Security Privileged Identity Manager Virtual Appliance...

Security Bulletin: Incorrect setting for serveServletsbyClassname can affect FTM for Check Services and FTM for Corporate Payment Services (CVE-2015-1927)

Summary Incorrect setting for serveServletsbyClassname could allow a remote attacker on WebSphere Application Server to gain elevated privileges on the system for FTM for Check Services and FTM for Corporate Payment Services Vulnerability Details CVEID: CVE-2015-1927 DESCRIPTION: IBM WebSphere...

Microsoft Windows: Turn on Mapper I/O (LLTDIO) driver

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winmapperiodriver.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Turn on Mapper I/O LLTDIO driver Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is fr...

Ubuntu 18.04 LTS : Bind vulnerability (USN-3683-1)

The remote Ubuntu 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3683-1 advisory. Andrew Skalski discovered that Bind could incorrectly enable recursion when the allow-recursion setting wasn't specified. This issue could improperly permit...

Microsoft Windows: Service: HomeGroup Listener

This test checks the setting for policy scriptaddpreferencename:"Value", type:"radio", value:"4;0;1;2;3"; OpenVAS Vulnerability Test $Id: winhomegrouplistener.nasl 11344 2018-09-12 06:57:52Z emoss $ Check value for HomeGroup Listener HomeGroupListener Authors: Emanuel Moss Copyright: Copyright c...

CVE-2018-5738

Change 4777 introduced in October 2017 introduced an unforeseen issue in releases which were issued after that date, affecting which clients are permitted to make recursive queries to a BIND nameserver. The intended and documented behavior is that if an operator has not specified a value for the...

Microsoft Windows: User Account Control: Detect application installations and prompt for elevation

This policy setting determines the behavior of application installation detection for the entire system. Some software might attempt to install itself after being given permission to run. The user may give permission for the program to run because the program is trusted. Then the user is prompted...

CVE-2018-5165

In 32-bit versions of Firefox, the Adobe Flash plugin setting for "Enable Adobe Flash protected mode" is unchecked by default even though the Adobe Flash sandbox is actually enabled. The displayed state is the reverse of the true setting, resulting in user confusion. This could cause users to...

Type confusion

In 32-bit versions of Firefox, the Adobe Flash plugin setting for "Enable Adobe Flash protected mode" is unchecked by default even though the Adobe Flash sandbox is actually enabled. The displayed state is the reverse of the true setting, resulting in user confusion. This could cause users to...

CVE-2018-5165

In 32-bit versions of Firefox, the Adobe Flash plugin setting for "Enable Adobe Flash protected mode" is unchecked by default even though the Adobe Flash sandbox is actually enabled. The displayed state is the reverse of the true setting, resulting in user confusion. This could cause users to...

Microsoft Windows: Network access: Shares that can be accessed anonymously

This security setting determines which network shares can accessed by anonymous users. C Microsoft Corporation 2015. Note: This policy check will report compliance by default if the key is empty or missing. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a...