Microsoft Expression Design wintab32.dll Library Loading

Added: 04/25/2012 CVE: CVE-2012-0016 BID: 52375 OSVDB: 80001 Background Microsoft Expression Design is a commercial professional illustration vector and raster graphic design tool for web images. Problem Microsoft Expression Design contains a flaw in the way it loads dynamic-link libraries DLL. T...

[SECURITY] Fedora 15 Update: samba-3.5.14-73.fc15.1

Samba is the suite of programs by which a lot of PC-related machines share files, printers, and other information such as lists of available files and printers. The Windows NT, OS/2, and Linux operating systems support this natively, and add-on packages can enable the same thing for DOS, Windows,...

[SECURITY] Fedora 17 Update: samba-3.6.4-82.fc17.1

Samba is the suite of programs by which a lot of PC-related machines share files, printers, and other information such as lists of available files and printers. The Windows NT, OS/2, and Linux operating systems support this natively, and add-on packages can enable the same thing for DOS, Windows,...

traceroute-geolocation NSE Script

Lists the geographic locations of each hop in a traceroute and optionally saves the results to a KML file, plottable on Google earth and maps. Script Arguments traceroute-geolocation.kmlfile full path and name of file to write KML data to. The KML file can be used in Google earth or maps to plot...

Critical: Red Hat Security Advisory: samba security update

Updated samba packages that fix one security issue are now available for Red Hat Enterprise Linux 4 Extended Life Cycle Support. The Red Hat Security Response Team has rated this update as having critical security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detail...

Microsoft Forefront Unified Access Gateway (UAG) Detection

Detects the installed version of Microsoft Forefront Unified Access Gateway. The script logs in via smb, searches for Microsoft Forefront Unified Access Gateway in the registry and gets the version from registry. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted...

Samba < 3.6.3 版本ndr_pull_lsa_SidArray堆溢出漏洞(CVE-2012-1182)

CVE ID: CVE-2012-1182 Samba是一套实现SMB（Server Messages Block）协议、跨平台进行文件共享和打印共享服务的程序。 Samba 3.6.3之前版本的RPC代码生成器存在错误，导致生成的代码中包含安全漏洞，这些生成的代码用在Samba控制RPC网络数据处理的部分。攻击者可通过特制的RPC调用无需用户验证造成服务器执行任意代码。 0 Samba 3.6.3 厂商补丁： Samba ----- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.samba.org/...

Microsoft Internet Explorer Multiple Vulnerabilities (2675157)

This host is missing a critical security update according to Microsoft Bulletin MS12-023. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Snort 2 DCE/RPC Preprocessor Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Snort 2 DCE/RPC preprocessor Buffer...

hostmap-bfk NSE Script

Discovers hostnames that resolve to the target's IP address by querying the online database at . The script is in the "external" category because it sends target IPs to a third party in order to query their database. This script was formerly until April 2012 known as hostmap.nse. Script Arguments...

Snort 2 DCE/RPC preprocessor Buffer Overflow

Exploit for windows platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core'...

Microsoft SMB Signing Disabled

Checks if SMB Signing is disabled at the remote SMB server. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Snort 2 - DCE/RPC Preprocessor Buffer Overflow (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Snort 2 DCE/RPC preprocessor Buffer...

OS Identification : NativeLanManager

The remote operating system can be identified based on its responses to an SMB authentication request. C Tenable, Inc. include"compat.inc"; if description scriptid58604; scriptversion"2.16"; scriptsetattributeattribute:"pluginmodificationdate", value:"2025/07/28"; scriptnameenglish:"OS...

Microsoft SMB Signing Information Disclosure Vulnerability

The host is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Apache Struts 2 ParametersInterceptor OGNL Command Injection

Added: 03/26/2012 CVE: CVE-2011-3923 BID: 51628 OSVDB: 78109 Background Apache Struts is an open-source web application framework for developing Java EE web applications. It uses and extends the Java Servlet API to encourage developers to adopt a model-view-controller MVC architecture. Problem...

GOM Media Player Detection (Windows SMB Login)

Detects the installed version of GOM Media Player. The script logs in via smb, searches for GOM Media Player in the registry and gets the installed path from SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Fedora Update for cifs-utils FEDORA-2011-10028

Check for the Version of cifs-utils OpenVAS Vulnerability Test Fedora Update for cifs-utils FEDORA-2011-10028 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

Microsoft Expression 'wintab32.dll' DLL加载任意代码执行漏洞(MS12-022)

BUGTRAQ ID: 52375 CVE ID: CVE-2012-0016 Expression Design 是个专业的插图和图形设计工具，可让您为 Web 和桌面应用程序使用者接口建立吸引人的项目。 Microsoft Expression以不安全的方式加载某些库，通过诱使用户打开远程WebDAV或SMB共享上的.xpr或.DESIGN文件，远程攻击者可利用此漏洞控制用户系统。 0 Microsoft Expression Design 4 Microsoft Expression Design 3 Microsoft Expression Design 2 Microsoft...

Microsoft Windows DirectWrite Denial of Service Vulnerability (2665364)

This host has moderate security update missing according to Microsoft Bulletin MS12-019. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...