Microsoft Window MPEG Layer-3 Remote Code Execution Vulnerability (2115168)

This host is missing a critical security update according to Microsoft Bulletin MS10-052. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows SMB Code Execution and DoS Vulnerabilities (982214)

This host is missing a critical security update according to Microsoft Bulletin MS10-054. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows SMB/CIFS service multiple security vulnerabilities

Buffer overflow, privilege escalation, DoS...

MS10-054: Vulnerabilities in SMB Server Could Allow Remote Code Execution (982214)

The remote host is affected by several vulnerabilities in the SMB server that may allow an attacker to execute arbitrary code or perform a denial of service against the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid48291; scriptversion"1.23";...

Inside Microsoft's August Patch Tuesday

Microsoft has released their planned 14 bulletins fixing 34 vulnerabilities today. There are four bulletins that administrators should look at patching as soon as possible. MS10-052 and MS10-055 both affect media files and are rated as Critical. Opening a malicious media file can lead to remote...

Microsoft Windows SMB Pool Overflow Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability that affects the Microsoft Server Message Block SMB protocol software. A remote attacker can exploit this issue to execute code with SYSTEM-level privileges. Failed exploit attempts will likely cause denial-of-service...

Microsoft SMB Server Pool Overflow Remote Code Execution (MS10-054; CVE-2010-2550)

The SMB Protocol is a network file sharing protocol that is implemented in Microsoft Windows. A remote code execution vulnerability has been reported in the Microsoft Windows Server Message Block SMB implementation. The vulnerability is due to insufficient validation by the Microsoft SMB Protocol...

Microsoft - SMB Server Trans2 Zero Size Pool Alloc (MS10-054)

!/usr/bin/env python import sys,struct,socket from socket import if lensys.argv=2: print '' print ' MS10-054 Proof Of Concept by Laurent Gaffie' print ' Usage: python '+sys.argv0+' TARGET SHARE-NAME No backslash' print ' Example: python '+sys.argv0+' 192.168.8.101 users' print '...

Microsoft SMB Server Variable Validation Denial of Service (MS10-054; CVE-2010-2551)

The SMB Protocol is a network file sharing protocol that is implemented in Microsoft Windows. A denial of service vulnerability has been reported in the Microsoft Windows Server Message Block SMB implementation. The vulnerability is due to insufficient validation by the Microsoft SMB Protocol...

Microsoft Windows SMB Variable Validation Denial of Service Vulnerability

Description Microsoft Windows is prone to a denial-of-service vulnerability that affects the Microsoft Server Message Block SMB protocol software. A remote attacker can exploit this issue to stop the affected system from responding, resulting in denial-of-service conditions. Technologies Affected...

Microsoft SMB Server Trans2 Zero Size Pool Alloc (MS10-054)

Exploit for windows platform in category dos / poc =========================================================== Microsoft SMB Server Trans2 Zero Size Pool Alloc MS10-054 =========================================================== !/usr/bin/env python import sys,struct,socket from socket import if...

Microsoft - SMB Server Trans2 Zero Size Pool Alloc (MS10-054)

Microsoft - SMB Server Trans2 Zero Size Pool Alloc MS10-054 !/usr/bin/env python import sys,struct,socket from socket import if lensys.argv=2: print '' print ' MS10-054 Proof Of Concept by Laurent Gaffie' print ' Usage: python '+sys.argv0+' TARGET SHARE-NAME No backslash' print ' Example: python...

Microsoft Windows SMB Stack Exhaustion Denial of Service Vulnerability

Description Microsoft Windows is prone to a denial-of-service vulnerability that affects the Microsoft Server Message Block SMB protocol software. A remote attacker can exploit this issue to stop the affected system from responding, resulting in denial-of-service conditions. Technologies Affected...

Microsoft SMB Stack Exhaustion Denial of Service (MS10-054; CVE-2010-2552)

The SMB Protocol is a network file sharing protocol that is implemented in Microsoft Windows. A denial of service vulnerability has been reported in the Microsoft Windows Server Message Block SMB implementation. The vulnerability is due to insufficient validation by the Microsoft SMB Protocol...

Update Protection against SAMBA SMBI Packets Chaining Memory Corruption

A vulnerability has been reported in Samba, an open-source implementation of Server Message Block/Common Internet File System SMB/CIFS. The vulnerability is due to improper validation when chaining SMB1 packets. Remote attackers could exploit this vulnerability by sending a crafted SMB message to...

RedHat Update for kernel RHSA-2010:0606-01

Check for the Version of kernel OpenVAS Vulnerability Test RedHat Update for kernel RHSA-2010:0606-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Microsoft Windows Shell Remote Code Execution Vulnerability (2286198)

This host is missing a critical security update according to Microsoft Bulletin MS10-046. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Mandriva Linux Security Advisory : wireshark (MDVSA-2010:113)

This advisory updates wireshark to the latest versions, fixing several security issues : The SMB dissector in Wireshark 0.99.6 through 1.0.13, and 1.2.0 through 1.2.8 allows remote attackers to cause a denial of service NULL pointer dereference via unknown vectors CVE-2010-2283. Buffer overflow i...

Mandriva Linux Security Advisory : wireshark (MDVSA-2010:016)

This advisory updates wireshark to the latest 1.2.5 version, fixing several bugs and two security issues : - The 1 SMB and 2 SMB2 dissectors in Wireshark 0.9.0 through 1.2.4 allow remote attackers to cause a denial of service crash via a crafted packet CVE-2009-4377 - Buffer overflow in the...

Microsoft DNS RPC Service extractQuotedChar() Overflow (SMB)

$Id: ms07029msdnszonename.rb 9929 2010-07-25 21:37:54Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...