9147 matches found
Microsoft Windows - NTLM Weak Nonce (MS10-012)
Microsoft Windows - NTLM Weak Nonce MS10-012 Windows SMB NTLM Authentication Weak Nonce Vulnerability Security Advisory Hernan Ochoa [email protected] - Agustin Azubel [email protected] Title: Windows SMB NTLM Authentication Weak Nonce Vulnerability Advisory ID: OCHOA-2010-0209...
MS10-083: Vulnerability in COM Validation in Windows Shell and WordPad Could Allow Remote Code Execution (2405882)
The remote windows host contains a version of the Windows Shell or the WordPad text editor that contains a vulnerability in the way it handles shortcut files. An attacker, exploiting this flaw, can execute arbitrary commands on the remote host subject to the privileges of the user opening the fil...
Embedded OpenType Font Engine Remote Code Execution Vulnerability (982132)
This host is missing a critical security update according to Microsoft Bulletin MS10-076. OpenVAS Vulnerability Test $Id: secpodms10-076.nasl 5934 2017-04-11 12:28:28Z antu123 $ Embedded OpenType Font Engine Remote Code Execution Vulnerability 982132 Authors: Madhuri D Copyright: Copyright c 2010...
Microsoft Windows Media Player Network Sharing Remote Code Execution Vulnerability (2281679)
This host is missing a critical security update according to Microsoft Bulletin MS10-075. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Microsoft Foundation Classes Could Allow Remote Code Execution Vulnerability (2387149)
This host is missing a critical security update according to Microsoft Bulletin MS10-074. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
SuSE 10 Security Update : ethereal (ZYPP Patch Number 6628)
Update of wireshark to fix multiple vulnerabilities : - The Paltalk dissector could crash on alignment-sensitive processors. CVE-2009-3549: CVSS v2 Base Score: 5.0 MEDIUM - The DCERPC/NT dissector could crash. CVE-2009-3550: CVSS v2 Base Score: 4.3 MEDIUM - The SMB dissector could crash...
smb-flood NSE Script
Exhausts a remote SMB server's connection limit by by opening as many connections as we can. Most implementations of SMB have a hard global limit of 11 connections for user accounts and 10 connections for anonymous. Once that limit is reached, further connections are denied. This script exploits...
Oracle Secure Backup Administration property_box.php objectname command injection
Added: 09/30/2010 CVE: CVE-2010-0906 BID: 41597 OSVDB: 66340 Background Oracle Secure Backup is a centralized tape backup management solution for Oracle Database. Problem A vulnerability in the propertybox.php script allows remote attackers to inject arbitrary commands via the objectname paramete...
Oracle Secure Backup Administration property_box.php objectname command injection
Added: 09/30/2010 CVE: CVE-2010-0906 BID: 41597 OSVDB: 66340 Background Oracle Secure Backup is a centralized tape backup management solution for Oracle Database. Problem A vulnerability in the propertybox.php script allows remote attackers to inject arbitrary commands via the objectname paramete...
Oracle Secure Backup Administration property_box.php Other Variable Command Injection
Added: 09/29/2010 CVE: CVE-2010-0899 BID: 41616 OSVDB: 66333 Background Oracle Secure Backup is a centralized tape backup management solution for Oracle Database. Problem A command injection vulnerability in the Oracle Secure Backup web interface allows remote attackers to execute arbitrary...
Microsoft Visual Studio Insecure Library Loading Vulnerability
Microsoft Visual Studio is prone to an insecure library loading vulnerability. This VT has been deprecated and replaced by the VT with the OID: 1.3.6.1.4.1.25623.1.0.900285. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...
Microsoft Internet Explorer - 'Winhlp32.exe' MsgBox Code Execution (MS10-023) (Metasploit)
$Id: ms10022ievbscriptwinhlp32.rb 10504 2010-09-28 16:19:50Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
openSUSE Security Update : cifs-mount (openSUSE-SU-2010:0659-1)
A buffer overflow in the sidparse function of samba could potentially be exploited by remote attackers to execute arbitrary code CVE-2010-3069. Additionally the update also contains fixes for the following non-security issues: bnc573246 - mounted shares via mount.cifs disappear when dhclient rene...
Nmap NSE: SMB Security Mode
This script attempts to get information about the SMB security level determined by SMB. This is a wrapper on the Nmap Security Scanner's http://nmap.org smb-security-mode.nse. OpenVAS Vulnerability Test $Id: gbnmapsmbsecuritymode.nasl 7006 2017-08-25 11:51:20Z teissa $ Wrapper for Nmap SMB Securi...
Nmap NSE: SMB Enum Shares
This script attempts to list the shares on a Windows system over the SMB protocol. This is a wrapper on the Nmap Security Scanner's http://nmap.org smb-enum-shares.nse. OpenVAS Vulnerability Test $Id: gbnmapsmbenumshares.nasl 7006 2017-08-25 11:51:20Z teissa $ Wrapper for Nmap SMB Enum Shares NSE...
Nmap NSE: SMB Enum Groups
This script attempts to get a list of groups from a Windows system over the SMB protocol. This is a wrapper on the Nmap Security Scanner's http://nmap.org smb-enum-groups.nse. OpenVAS Vulnerability Test $Id: gbnmapsmbenumgroups.nasl 7006 2017-08-25 11:51:20Z teissa $ Wrapper for Nmap SMB Enum...
Nmap NSE: SMB Check Vulnerabilities
This script attempts to check the following vulnerabilities: - MS08-067, a Windows RPC vulnerability - Conficker, an infection by the Conficker worm - Unnamed regsvc DoS - SMBv2 exploit CVE-2009-3103 This is a wrapper on the Nmap Security Scanner's http://nmap.org smb-check-vulns.nse. OpenVAS...
Nmap NSE: SMB Enum Processes
This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Nmap NSE: SMB Enum Processes
This script attempts to list all the running processes from a remote Windows system over the SMB protocol. This is a wrapper on the Nmap Security Scanner's http://nmap.org smb-enum-processes.nse. OpenVAS Vulnerability Test $Id: gbnmapsmbenumprocesses.nasl 7006 2017-08-25 11:51:20Z teissa $ Wrappe...
Nmap NSE: SMB Enum Users
This script attempts to enumerate the users on a remote Windows system, with as much information as possible. This is a wrapper on the Nmap Security Scanner's http://nmap.org smb-enum-users.nse. OpenVAS Vulnerability Test $Id: gbnmapsmbenumusers.nasl 7000 2017-08-24 11:51:46Z teissa $ Wrapper for...