CVE-2002-0401

SMB dissector in Ethereal 0.9.3 and earlier allows remote attackers to cause a denial of service crash or execute arbitrary code via malformed packets that cause Ethereal to dereference a NULL pointer...

Microsoft Windows SMB Service Detection

The remote service understands the CIFS Common Internet File System or Server Message Block SMB protocol, used to provide shared access to files, printers, etc between nodes on a network. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid11011; scriptversion"1.43";...

SMB Scope

This plugin configures Nessus so that it knows if it should query local information on each host or information pertaining to the domain ie: requests will be forwarded to the PDC. If you test a single workstation, you want information about the domain. If you test the whole network, including the...

Microsoft Windows User Groups List

Using the supplied credentials it was possible to retrieve the list of groups each user belongs to. Groups are stored in the KB for further checks. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid10894; scriptversion"1.20"; scriptnameenglish:"Microsoft Windows User...

Microsoft Windows User Aliases List

Using the supplied credentials it was possible to retrieve the list of groups each user belong to. Aliases are stored in the KB for further checks. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid10893; scriptversion"1.20"; scriptnameenglish:"Microsoft Windows User...

SMB Use Host SID to Enumerate Local Users

Using the host security identifier SID, Nessus was able to enumerate local users on the remote Windows system. C Tenable Network Security, Inc. @PREFERENCES@ include"compat.inc"; if description scriptid10860; scriptversion"1.62"; scriptsetattributeattribute:"pluginmodificationdate",...

Microsoft Windows SMB NativeLanManager Remote System Information Disclosure

Nessus was able to obtain the remote operating system name and version Windows and/or Samba by sending an authentication request to port 139 or 445. Note that this plugin requires SMB to be enabled on the host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10785;...

CVE-1999-1237

CVE-1999-1237 describes multiple buffer overflows in the smbvalid/smbval SMB authentication library, as used by Apache::AuthenSmb and potentially other modules. The vulnerability allows remote attackers to execute arbitrary commands by sending excessively long usernames, passwords, or via other u...

CVE-1999-1237

Multiple buffer overflows in smbvalid/smbval SMB authentication library, as used in Apache::AuthenSmb and possibly other modules, allows remote attackers to execute arbitrary commands via 1 a long username, 2 a long password, and 3 other unspecified methods...

Gene6 BPFTP FTP Server 2.0 - User Credentials Disclosure

Gene6 BPFTP FTP Server 2.0 - User Credentials Disclosure source: https://www.securityfocus.com/bid/2534/info G6 FTP Server now known as BPFTP Server is an internet FTP server by Gene6 If a logged in FTP user connects to an external share and submits a malformed 'size' or 'mdtm' command, the user...

CVE-2000-1227

Windows NT 4.0 and Windows 2000 hosts allow remote attackers to cause a denial of service unavailable connections by sending multiple SMB SMBnegprots requests but not reading the response that is sent back...

CVE-2000-0885

Buffer overflows in Microsoft Network Monitor Netmon allow remote attackers to execute arbitrary commands via a long Browser Name in a CIFS Browse Frame, a long SNMP community name, or a long username or filename in an SMB session, aka the "Netmon Protocol Parsing" vulnerability. NOTE: It is high...

Apple Mac DoS

I have noticed some unusual behaviour with Mac OS 9 I am not a Mac user so I apologize if this is a known bug I have checked the archives and generally on the Net and can find no mention of this effect any way a bit of background... I was nmaping a mac running os 9 to see if I could diagnose why ...

Microsoft Windows SMB Registry : NT RAS Administration Registry Key Permission Weakness Local Privilege Escalation

This script checks whether the following key can be modified by non-admins : HKLM\Software\Microsoft\Windows\RAS Write access to this key allows an unprivileged user to gain additional privileges. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10567;...

CVE-2000-0885

CVE-2000-0885 covers multiple buffer overflows in Microsoft Network Monitor (Netmon) parsers. The vulnerabilities occur in browser.dll (CIFS Browse Frame), snmp.dll (SNMP community name), and smb.dll (SMB sessions) where unchecked string handling can overflow stacks, enabling remote arbitrary cod...

NSFOCUS SA2000-03: Microsoft WIN9X Share Service File Handle Vulnerability

NSFOCUS Security AdvisorySA2000-03 Topic : Microsoft WIN9X Share Service File Handle Vulnerability Release Dateёє July 10, 2000 Update Dateёє Oct 11, 2000 Affected System: ================= - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows 98 Second Edition Non-affected Systemёє...

pam_smb / pam_ntdom User Name Remote Overflow

The remote telnet server shuts the connection abruptly when given a long username followed by a password. Although Nessus could not be 100% positive, it may mean that the remote host is using an older pamsmb or pamntdom pluggable authentication module to validate user credentials against a NT...

[SECURITY] New version of libpam-smb released

Package: libpam-smb Vulnerability: remote root exploit Debian-specific: no libpam-smb contains a buffer overflow that can be used to execute arbitrary commands with root privilege. libpam-smb was not shipped with Debian 2.1 slink, but was included in Debian 2.2 potato. A fixed version of libpam-s...

[SECURITY] New version of libpam-smb released

------------------------------------------------------------------------ Debian Security Advisory [email protected] http://www.debian.org/security/ Michael Stone September 11, 2000 - ------------------------------------------------------------------------ Package: libpam-smb Vulnerability:...

Microsoft Windows 9x - File Handle Buffer Overflow

Microsoft Windows 9x - File Handle Buffer Overflow // source: https://www.securityfocus.com/bid/1796/info The file sharing SMB service in Windows enables client applications to access and modify files from a server on the network. The SMB service within Windows 95/98 allocates 0x4004 bytes to sto...