CVE-2009-4377: Undefined Security Weakness

The 1 SMB and 2 SMB2 dissectors in Wireshark 0.9.0 through 1.2.4 allow remote attackers to cause a denial of service crash via a crafted packet that triggers a NULL pointer dereference, as demonstrated by fuzz-2009-12-07-11141.pcap...

Wireshark / Ethereal 0.9.0 to 1.2.4 Multiple Vulnerabilities

The installed version of Wireshark or Ethereal is potentially affected by multiple vulnerabilities : - The Daintree SNA file parser can overflow a buffer. Bug 4294 - The SMB and SMB2 dissectors can crash. Bug 4301 - The IPMI dissector can crash on Windows. Bug 4319 These vulnerabilities can resul...

Microsoft Windows KeAccumulateTicks()函数SMB2报文远程拒绝服务漏洞

BUGTRAQ ID: 36989 Microsoft Windows是微软发布的非常流行的操作系统。 远程攻击者可以通过向Windows 7或Server 2008发送畸形的SMB报文在KeAccumulateTicks函数中触发NTASSERT或DbgRaiseAssertionFailure，导致内核由于死循环而变得忙碌。 Microsoft Windows Server 2008 R2 Microsoft Windows 7 厂商补丁： Microsoft --------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

Microsoft Windows 7 & 2008 'KeAccumulateTicks()' SMB2 Packet Remote Denial of Service

No description provided by source. win7-crash.py: Trigger a remote kernel crash on Win7 and server 2008R2 infinite loop Crash in KeAccumulateTicks due to NTASSERT/DbgRaiseAssertionFailure caused by an infinite loop. NO BSOD, YOU GOTTA PULL THE PLUG. To trigger it fast from the target:...

Windows 7 / Server 2008R2 Remote Kernel Crash

Exploit for unknown platform in category dos / poc ============================================= Windows 7 / Server 2008R2 Remote Kernel Crash ============================================= Title: Windows 7 / Server 2008R2 Remote Kernel Crash CVE-ID: OSVDB-ID: Author: Laurent Gaffie Published:...

Microsoft Windows 72008 R2 - Remote Kernel Crash

Microsoft Windows 72008 R2 - Remote Kernel Crash !/usr/bin/python win7-crash.py: Trigger a remote kernel crash on Win7 and server 2008R2 infinite loop Crash in KeAccumulateTicks due to NTASSERT/DbgRaiseAssertionFailure caused by an infinite loop. NO BSOD, YOU GOTTA PULL THE PLUG. To trigger it...

SMB Negotiate SMB2 Dialect Corruption

This module sends a series of SMB negotiate requests that advertise a SMB2 dialect with corrupted bytes. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'SMB Negotiate SMB2 Dialect Corruption',...

Microsoft Windows SMB2 Negotiation Protocol RCE Vulnerability

This host is missing a critical security update according to Microsoft Bulletin MS09-050. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows SMBv2协商远程代码执行漏洞(MS09-050)

Bugraq ID: 36299 CVE ID：CVE-2009-3103 Microsoft windows是一款流行的操作系统。 Microsoft windows SMB2是新版windows捆绑的SMB协议实现，SRV2.SYS驱动不正确处理发送给NEGOTIATE PROTOCOL REQUEST功能的畸形SMB头字段数据，NEGOTIATE PROTOCOL REQUEST是客户端发送给SMB服务器的第一个SMB查询，用于识别SMB语言并用于之后的通信。 远程攻击者可以构建Process Id...

Microsoft Windows SMB2命令值远程代码执行漏洞(MS09-050)

Bugraq ID: 36594 CVE ID：CVE-2009-2532 Microsoft windows是一款流行的操作系统。 Microsoft windows SMB2是新版windows捆绑的SMB协议实现，Microsoft Server Message Block SMB协议软件处理特殊构建的SMB报文存在漏洞，攻击者可以提交恶意请求报文对系统进行拒绝服务攻击。 利用此漏洞无需验证，允许攻击者发送特殊构建的网络消息给运行server服务的计算机，成功利用漏洞可导致计算机停止响应，直至重新启动。 目前没有详细漏洞细节提供。 Microsoft Windows Vista x...

Microsoft Windows SMB2 Command Value Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute code with SYSTEM-level privileges. Failed exploit attempts will likely cause denial-of-service conditions. Technologies Affected Microsoft Windows 7 RC Microsoft Windows ...

Microsoft Windows SMB2 Field Validation Remote Denial of Service Vulnerability

Description Microsoft Windows is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to cause the affected computer to stop responding, denying service to legitimate users. Technologies Affected Microsoft Windows 7 RC Microsoft Windows 7 beta Microsoft Windows...

Microsoft Windows (including Windows 7) SMB2 array index overflow

Crash on SMB2 protocol NEGOTIATE PROTOCOL REQUEST SMB request parsing...

Microsoft Windows SMB2 '_Smb2ValidateProviderCallback()' RCE Vulnerability

Microsoft Windows is prone to a remote code execution RCE vulnerability when processing the protocol headers for the Server Message Block SMB Negotiate Protocol Request. NOTE: Reportedly, for this issue to be exploitable, file sharing must be enabled. SPDX-FileCopyrightText: 2009 Greenbone AG Som...

Microsoft Windows SMB2 '_Smb2ValidateProviderCallback()' Remote Code Execution Vulnerability

Microsoft Windows is prone to a remote code-execution vulnerability when processing the protocol headers for the Server Message Block SMB Negotiate Protocol Request. NOTE: Reportedly, for this issue to be exploitable, file sharing must be enabled. An attacker can exploit this issue to execute cod...

Remote exploit released for Windows Vista SMB2 worm hole

Security researchers at penetration testing firm Immunity have created a reliable remote exploit capable of spawning a worm through an unpatched security hole in Microsoft’s dominant Windows operating system. A team of exploit writers led by Kostya Kortchinsky attacked the known SMB v2...

Microsoft Confirms SMB2 Flaw, Heightens Severity

Microsoft has issued a formal security advisory to confirm the remote reboot flaw in its implementation of the SMB2 protocol, going a step further to warn that a successful attack could lead to remote code execution and full system takeover. The vulnerability, which was originally released as a...

Microsoft Windows SMB2 '_Smb2ValidateProviderCallback()'拒绝服务漏洞

Bugraq ID: 36299 Microsoft Windows是一款流行的操作系统。 Microsoft Windows Vista和Windows 7包含的SMB2组件不正确处理用户提交的请求，远程攻击者可以利用漏洞使目标系统触发蓝屏。 SRV2.SYS驱动不正确处理发送给NEGOTIATE PROTOCOL REQUEST功能的畸形SMB头字段数据，NEGOTIATE PROTOCOL REQUEST是客户端发送给SMB服务器的第一个SMB查询，用于识别SMB语言并用于之后的通信。 远程攻击者可以构建Process Id...

Stage is Set for Vista Worm With SMB2 Flaw

From The Last Watchdog Byron Acohido A strong dose of déjà vu enshrouds the heightened security advisory Microsoft issued today about the newly-disclosed SMB2 zero-day vulnerability in the Windows Vista and Windows Server 2008 operating systems. It was one year ago today — September 2008 — that...

Microsoft Windows Vista/7 - SMB2.0 Negotiate Protocol Request Remote Blue Screen of Death (MS07-063)

============================================= - Release date: September 7th, 2009 - Discovered by: Laurent Gaffié - Severity: High ============================================= I. VULNERABILITY ------------------------- Windows Vista, Server 2008 R2, 7 RC : SMB2.0 NEGOTIATE PROTOCOL REQUEST Remo...