8865 matches found
Microsoft Windows SMB Registry : Windows 2003 Server Service Pack Detection
It is possible to determine the Service Pack version of the Windows 2003 system. by reading the registry key 'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\CSDVersion'. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid17662; scriptversion"1.35";...
Microsoft Windows SMB : Obtains the Password Policy
Using the supplied credentials it was possible to extract the password policy for the remote Windows host. The password policy must conform to the Informational System Policy. C Tenable Network Security, Inc. Requested by Michael Richardson include"compat.inc"; if description scriptid17651;...
Kerberos configuration
This plugin lets a user enter information about the Kerberos server that will be queried by some scripts SMB and SSH to log into the remote hosts. TRUSTED...
Update: MS05-011 EEYE: Windows SMB Client Transaction Response Handling Vulnerability
Windows NT 4.0 was found to be vulnerable to bugs resolved in the MS05-011 patch. Microsoft will not be releasing a public Windows NT 4.0 patch due to the products end of life. Microsoft has however created a private patch for customers whom have paid for extended Windows NT 4.0 support. For more...
EEYE: Windows SMB Client Transaction Response Handling Vulnerability
Windows SMB Client Transaction Response Handling Vulnerability Release Date: February 8, 2005 Date Reported: August 2, 2004 Severity: High Remote Code Execution Vendor: Microsoft Systems Affected: Windows 2000 Windows XP Windows Server 2003 Overview: eEye Digital Security has discovered a...
CVE-2005-0045
CVE-2005-0045 is a remote code execution vulnerability in the SMB client/server implementation on Windows NT 4.0, 2000, XP and Server 2003. The issue stems from improper validation of SMB packets, enabling an attacker to execute arbitrary code by crafting SMB Transaction responses (notably Trans ...
CVE-2005-0045
The Server Message Block SMB implementation for Windows NT 4.0, 2000, XP, and Server 2003 does not properly validate certain SMB packets, which allows remote attackers to execute arbitrary code via Transaction responses containing 1 Trans or 2 Trans2 commands, aka the "Server Message Block...
Microsoft Windows Server Message Block Handlers Remote Buffer Overflow Vulnerability
Description Microsoft Windows Server Message Block handler is reported prone to a remote buffer-overflow vulnerability. Note that since SMB drivers execute in the kernel memory space, a successful attack can grant a remote attacker unauthorized access with ring-0 privileges. Microsoft has noted...
Microsoft Windows SMB packet validation vulnerability
Overview A vulnerability in the way that Microsoft Windows handles some SMB packets could allow remote attackers to execute code of their choosing on a vulnerable system. Description The Microsoft Server Message Block SMB, and its follow-on, Common Internet File System CIFS, are network protocols...
Microsoft Windows SMB : Suspicious Software Detection
This plugin checks for the presence of files and programs which might have been installed without user consent. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid16314; scriptversion"$Revision: 1.22 $"; scriptcvsdate"$Date: 2015/10/21 20:34:21 $";...
SMB filesystem read system call vulnerable to buffer overflow
Overview The SMB filesystem read system call contains buffer overflow vulnerability that may allow an attacker to cause a denial-of-service condition. Description "Server Message Block SMB is an application-level protocol that supports file, printer, and other resource sharing. The SMB filesystem...
USN-60-0: Linux kernel vulnerabilities
CAN-2005-0001: Paul Starzetz discovered a race condition in the Linux page fault handler code. This allowed an unprivileged user to gain root privileges on multiprocessor machines under some circumstances. This also affects the Hyper-Threading mode on Pentium 4 processors...
CVE-2004-1171
KDE 3.2.x and 3.3.0 through 3.3.2, when saving credentials that are 1 manually entered by the user or 2 created by the SMB protocol handler, stores those credentials for plaintext in the user's .desktop file, which may be created with world-readable permissions, which could allow local users to...
CVE-2004-0829
smbd in Samba before 2.2.11 allows remote attackers to cause a denial of service daemon crash by sending a FindNextPrintChangeNotify request without a previous FindFirstPrintChangeNotify, as demonstrated by the SMB client in Windows XP SP2...
CVE-2004-1142
Ethereal 0.9.0 through 0.10.7 allows remote attackers to cause a denial of service CPU consumption via a certain malformed SMB packet...
CVE-2004-1142
CVE-2004-1142 affects Ethereal versions 0.9.0 through 0.10.7, where a remote attacker can trigger a denial of service (CPU consumption) by sending a malformed SMB packet. The OpenVAS/OSS advisories confirm Ethereal-related fixes and security updates across platforms (e.g., SLES9, Gentoo GLSA GLSA...
DSA-613-1 ethereal - infinite loop
Bulletin has no description...
Mandrake Linux Security Advisory : ethereal (MDKSA-2004:152)
A number of vulnerabilities were discovered in Ethereal : - Matthew Bing discovered a bug in DICOM dissection that could make Ethereal crash CVE-2004-1139 - An invalid RTP timestamp could make Ethereal hang and create a large temporary file, possibly filling available disk space CVE-2004-1140 - T...
GLSA-200412-15 : Ethereal: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200412-15 Ethereal: Multiple vulnerabilities There are multiple vulnerabilities in versions of Ethereal earlier than 0.10.8, including: Bug in DICOM dissection discovered by Bing could make Ethereal crash CAN 2004-1139. An invalid...