Samba格式串和安全绕过漏洞

Bugraq ID: 35472 CVE ID：CVE-2009-1888 CVE-2009-1886 CNCVE ID：CNCVE-20091888 CNCVE-20091886 Samba是一款实现SMB协议、跨平台进行文件共享和打印共享服务的程序。 Samba存在格式串和安全绕过问题，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 -Samba 3.0.31 - 3.3.5中的smbd守护程序包含一个未初始化数据值读取问题，可影响访问控制。如果用户尝试修改访问拒绝权限的控制列表时，如果在smb.conf中设置"dos...

DSA-1823-1 samba - several vulnerabilities

Bulletin has no description...

IrfanView Detection (Windows SMB Login)

SMB login-based detection of IrfanView. Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute ...

SMB File Server Enumeration

Binary data 7009.pasl...

StoneTrip Ston3d Products Detection (Windows SMB Login)

This script detects the installed version of StoneTrip Ston3d products application. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...

SMB AndX File Handle Detection (server)

Binary data 5054.prm...

smb-brute NSE Script

Attempts to guess username/password combinations over SMB, storing discovered combinations for use in other scripts. Every attempt will be made to get a valid list of users and to verify each username before actually using them. When a username is discovered, besides being printed, it is also sav...

Immunity Canvas: MS09_022_LOADDLL

Name| ms09022loaddll ---|--- CVE| CVE-2009-0230 Exploit Pack| CANVAS Description| Microsoft Windows Print Spooler Arbitrary DLL Loading Notes| CVE Name: CVE-2009-0230 VENDOR: Microsoft MSADV: MS09-022-LOADDLL Repeatability: One shot Note: Valid credentials of a user with "Manage Printer" privileg...

Vulnerabilities in Windows Kernel Could Allow Elevation of Privilege (968537)

This host is missing a critical security update according to Microsoft Bulletin MS09-025. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows Search Script Execution Vulnerability (963093)

This host is missing a critical security update according to Microsoft Bulletin MS09-023. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Vulnerability in RPC Could Allow Elevation of Privilege (970238)

This host is missing a critical security update according to Microsoft Bulletin MS09-026. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Vulnerabilities in Print Spooler Could Allow Remote Code Execution (961501)

This host is missing a critical security update according to Microsoft Bulletin MS09-022. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS09-024: Vulnerability in Microsoft Works Converters Could Allow Remote Code Execution (957632)

The remote host is running a version of Microsoft Works for Windows document converters that is affected by a buffer overflow vulnerability. If an attacker can trick a user on the affected host into opening a specially crafted Works file, this issue could be leveraged to run arbitrary code on the...

Sonic Spot Audioactive Player Version Detection

This script detects the version of Sonic Spot Audioactive Player and sets the version in KB. OpenVAS Vulnerability Test $Id: gbsonicspotaudioactiveplayerdetect.nasl 5943 2017-04-12 14:44:26Z antu123 $ Sonic Spot Audioactive Player Version Detection Authors: Nikita MR Copyright: Copyright c 2009...

Xvid Detection (Windows SMB Login)

This script retrieves Xvid version for Windows. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MS09-0 0 1 SMB Dos Poc Exploit-vulnerability warning-the black bar safety net

Today with python to write a SMB dos poc, test vista sp1, A packet in the past immediately a blue screen, but XP SP2 not work, because XP SP2 the following default does not allow null sessions to access the lsarpc,samr, etc. named pipes. MS09-0 0 1 SMB Dos Vulnerabilities Poc Exploit Author :...

kernel: cifs: memory overwrite when saving nativeFileSystem field during mount

Buffer overflow in fs/cifs/connect.c in CIFS in the Linux kernel 2.6.29 and earlier allows remote attackers to cause a denial of service crash via a long nativeFileSystem field in a Tree Connect response to an SMB mount request...

PuTTY Detection (Windows SMB Login)

SMB login-based detection of PuTTY. Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it...

ImageMagick Detection (Windows SMB Login)

Detects the installed version of ImageMagick. The script logs in via smb, searches for ImageMagick in the registry and gets the version from SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

F-PROT Antivirus Detection (Windows SMB Login)

Detects the installed version of F-PROT Antivirus on Windows. The script logs in via smb, searches for F-PROT in the registry and gets the version from the DisplayVersion string. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...