PT-2017-3736

Name of the Vulnerable Software and Affected Versions: Samba versions prior to 4.4.16 Samba versions prior to 4.5.14 Samba versions prior to 4.6.8 Description: The issue is related to the lack of signing and encryption requirements for SMB traffic when using DFS redirects. This can be exploited b...

Microsoft Windows Search Information Disclosure (CVE-2017-8544)

An information disclosure exists in the Search component of Microsoft Windows. The vulnerability is due to how Windows Search handles objects in memory. A remote attacker can exploit this vulnerability by sending specially crafted SMB messages to the Windows Search service...

CCleaner Cloud Agent Detection (Windows SMB Login)

Detects the installed version of CCleaner Cloud Agent. The script logs in via smb, searches for SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Design/Logic Flaw

The SMB/CIFS parser in tcpdump before 4.9.2 has a buffer over-read in smbutil.c:namelen...

CVE-2017-12893

The SMB/CIFS parser in tcpdump before 4.9.2 has a buffer over-read in smbutil.c:namelen...

CVE-2017-12893

The SMB/CIFS parser in tcpdump before 4.9.2 has a buffer over-read in smbutil.c:namelen...

CVE-2017-12893

The SMB/CIFS parser in tcpdump before 4.9.2 has a buffer over-read in smbutil.c:namelen...

CVE-2017-12893

CVE-2017-12893 affects tcpdump prior to 4.9.2. The issue is a buffer over-read in the SMB/CIFS parser (smbutil.c:name_len()), enabling a remote attacker to potentially read memory and disclose information. - Affected product: tcpdump (packet analyzer). - Vulnerable component: SMB/CIFS parsing. - ...

CVE-2017-12893

The SMB/CIFS parser in tcpdump before 4.9.2 has a buffer over-read in smbutil.c:namelen...

CVE-2017-12893

The SMB/CIFS parser in tcpdump before 4.9.2 has a buffer over-read in smbutil.c:namelen...

CVE-2017-12893

The SMB/CIFS parser in tcpdump before 4.9.2 has a buffer over-read in smbutil.c:namelen...

CVE-2017-12893

The SMB/CIFS parser in tcpdump before 4.9.2 has a buffer over-read in smbutil.c:namelen...

CVE-2017-12893: Out-of-bounds Read

The SMB/CIFS parser in tcpdump before 4.9.2 has a buffer over-read in smbutil.c:namelen...

CVE-2017-12893

The SMB/CIFS parser in tcpdump before 4.9.2 has a buffer over-read in smbutil.c:namelen...

Microsoft Office 2007 Service Pack 3 Remote Code Execution Vulnerability (KB3213646)

This host is missing an important security update according to Microsoft KB3213646 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Microsoft .NET Framework Remote Code Execution Vulnerability (KB4040977)

This host is missing an important security update according to Microsoft KB4040977 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Microsoft Office Graphics Component Remote Code Execution Vulnerability (KB3213649)

This host is missing a critical security update according to Microsoft KB3213649 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft PowerPoint 2007 Service Pack 3 Remote Code Execution Vulnerability (KB3213642)

This host is missing an important security update according to Microsoft KB3213642. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...

App Layering: Supporting DFS File Shares

The ELM can only access a DFS namespace if SMB 1.0 is enabled on the servers. If SMB 1.0 is disabled, as is becoming more common, the ELM cannot access a DFS namespace directly. Attempts to test the connection will fail...

PT-2017-12754

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue is related to a buffer over-read in the SMB/CIFS parser of tcpdump, which could allow a remote attacker to obtain sensitive information. This can be achieved by sending a specially crafted...