Microsoft Windows 2000XP - SMB Authentication Remote Overflow

Microsoft Windows 2000XP - SMB Authentication Remote Overflow Exploit for "Authentication flaw in Windows SMB protocol" Release Date: April 24, 2003 Code by Haamed Gheibi [email protected] Salman Niksefat [email protected] Systems Affected by this exploit: Windows 2000 SP0 SP1 SP2...

Authentication flaw in microsoft SMB protocol

Detailed information: http://seclab.ce.aut.ac.ir/vreport.htm Summary ======= Microsoft uses SMB Protocol for “File and Printer sharing service” in all versions of Windows. Upon accessing a network resource, NTLM Authentication is used to authenticate the client on the server. When a logged-in use...

Samba 2.2.x - nttrans Remote Overflow (Metasploit)

Samba 2.2.x - nttrans Remote Overflow Metasploit $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Samba 2.2.0 2.2.8 (OSX) - trans2open Overflow (Metasploit)

Samba 2.2.0 2.2.8 OSX - trans2open Overflow Metasploit $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

CVE-2002-0401

The CVE-2002-0401 issue affects Ethereal SMB dissector: versions 0.9.3 and earlier are vulnerable to remote denial of service or arbitrary code execution due to a NULL pointer dereference when handling malformed SMB packets. Connected sources confirm the flaw and indicate remediation by upgrading...

CVE-2003-0085

Buffer overflow in the SMB/CIFS packet fragment re-assembly code for SMB daemon smbd in Samba before 2.2.8, and Samba-TNG before 0.3.1, allows remote attackers to execute arbitrary code...

CVE-2002-1534

Macromedia Flash Player allows remote attackers to read arbitrary files via XML script in a .swf file that is hosted on a remote SMB share...

Microsoft Windows SMB Registry : Classic Logon Screen

The registry key HKLM\Software\Microsoft\Windows NT\CurrentVersion\WinLogon\LogonType is set to 1. It means that users who attempt to log in locally will see get the 'new' WindowsXP logon screen which displays the list of users of the remote host. C Tenable Network Security, Inc...

CVE-2003-0085

Samba vulnerability CVE-2003-0085 is a remote, unauthenticated buffer overflow in the SMB/CIFS packet fragment re-assembly code used by smbd, affecting Samba prior to 2.2.8 and Samba-TNG prior to 0.3.1. An attacker could remotely execute arbitrary code (often with root privileges) by sending craf...

CVE-2003-0085

Buffer overflow in the SMB/CIFS packet fragment re-assembly code for SMB daemon smbd in Samba before 2.2.8, and Samba-TNG before 0.3.1, allows remote attackers to execute arbitrary code...

Multiple bugs in Samba

Buffer overflow on SMB/CIFS packet re-assembly, chown race conditions...

Samba 2.2.x - CIFS9000 Server A.01.x Packet Assembling Buffer Overflow

Samba 2.2.x - CIFS9000 Server A.01.x Packet Assembling Buffer Overflow / source: https://www.securityfocus.com/bid/7106/info Samba is prone to a buffer-overflow vulnerability when the ' ' service tries to reassemble specially crafted SMB/CIFS packets. An attacker can exploit this vulnerability by...

Samba 2.2.x - CIFS/9000 Server A.01.x Packet Assembling Buffer Overflow

/ source: https://www.securityfocus.com/bid/7106/info Samba is prone to a buffer-overflow vulnerability when the ' ' service tries to reassemble specially crafted SMB/CIFS packets. An attacker can exploit this vulnerability by creating a specially formatted SMB/CIFS packet and sending it to a...

Virus Infection Detection (deprecated)

This script checks for the presence of different viruses on the remote host, by using the SMB credentials that you provide to Nessus. - W32/Badtrans-B - JSGIGGER.A@mm - W32/Vote-A - W32/Vote-B - CodeRed - W32.Sircam.Worm@mm - W32.HLLW.Fizzer@mm - W32.Sobig.B@mm - W32.Sobig.E@mm - W32.Sobig.F@mm -...

MS02-045: Unchecked buffer in Network Share Provider (326830)

Due to a flaw in Microsoft's SMB implementation, the remote host is vulnerable to a denial of service attack. By sending a specially crafted packet request, an attacker could launch a denial of service, causing the affected host to crash. Note that this vulnerability is not exploitable without...

MS02-070: Flaw in SMB Signing Could Enable Group Policy to be Modified (329170)

The remote version of Windows contains a flaw in the SMB signing implementation. SMB signing is used to sign each packets sent between a client and a server to protect them against man-in-the-middle attacks. If the Domain policy is configured to force usage of SMB signing, it is possible for an...

Windows 2000 SMB signing protection bypass

During connectio nsetup it's possible to switch off SMB signing regardless of policy setting...

Microsoft Security Bulletin MS02-070: Flaw in SMB Signing Could Enable Group Policy to be Modified (309376)

-----BEGIN PGP SIGNED MESSAGE----- - ---------------------------------------------------------------------- Title: Flaw in SMB Signing Could Enable Group Policy to be Modified 309376 Released: 11 December 2002 Revised: 22 January 2003 version 2.0 Software: Microsoft Windows 2000 Microsoft Windows...

CVE-2002-1256

The SMB signing capability in the Server Message Block SMB protocol in Microsoft Windows 2000 and Windows XP allows attackers to disable the digital signing settings in an SMB session to force the data to be sent unsigned, then inject data into the session without detection, e.g. by modifying gro...

Microsoft Security Bulletin MS02-070: Flaw in SMB Signing Could Enable Group Policy to be Modified (309376)

-----BEGIN PGP SIGNED MESSAGE----- - ---------------------------------------------------------------------- Title: Flaw in SMB Signing Could Enable Group Policy to be Modified 309376 Date: 11 December 2002 Software: Windows 2000, Windows XP Impact: Modify group policy Max Risk: Moderate Bulletin:...