Mac OS X Security Update 2009-005

The remote host is missing Security Update 2009-005. SPDX-FileCopyrightText: 2010 LSS Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

Mac OS X 10.6.3 Update / Mac OS X Security Update 2010-002

The remote host is missing Mac OS X 10.6.3 Update / Mac OS X Security Update 2010-002. SPDX-FileCopyrightText: 2010 LSS Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

Samba Denial Of Service

=============================================================================== stratsec Security Advisory: SS-2010-005 =============================================================================== Title: Samba Multiple DoS Vulnerabilities Version: 1.0 Issue type: Multiple Affected vendor: Samb...

Microsoft Services - 'nwwks.dll' (MS06-066) (Metasploit)

$Id: ms06066nwwks.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Microsoft Workstation Service - NetAddAlternateComputerName Overflow (MS03-049) (Metasploit)

$Id: ms03049netapi.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Samba mount.cifs工具符号链接攻击本地权限提升漏洞

BUGTRAQ ID: 39898 CVE ID: CVE-2010-0747 Samba是一套实现SMB（Server Messages Block）协议、跨平台进行文件共享和打印共享服务的程序。 Samba的mount.cifs工具中的client/mount.cifs.c文件存在安全漏洞，本地用户可以通过对加载点目录文件执行符号链接攻击导致在任意加载点上加载CIFS共享，获得权限提升。 Samba 3.4.7 厂商补丁： Samba ----- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.samba.org/...

Samba 3.4.5 client/mount.cifs.c本地拒绝服务漏洞

BUGTRAQ ID: 38326 CVE ID: CVE-2010-0547 Samba是一套实现SMB（Server Messages Block）协议、跨平台进行文件共享和打印共享服务的程序。 Samba的mount.cifs工具中的client/mount.cifs.c文件没有正确地验证由有效字符组成的设备名和加载点字符串，这允许本地用户通过特制的字符串导致拒绝服务（mtab破坏）。 Samba 3.4.5 厂商补丁： Debian ------ Debian已经为此发布了一个安全公告（DSA-2004-1）以及相应补丁: DSA-2004-1：New samba package...

MDaemon Mailer Daemon 11.0.1 File Disclosure

MDaemon Mailer Daemon Version 11.0.1 LATEST Remote File Disclosure Bug Found & Exploited by Kingcope May 2010 The latest version at the time of this advisory is vulnerble to the attack. It seems all files which the SYSTEM account can read can be accessed remotely, even accessing files on SMB shar...

Trellian FTP Version Detection

This script finds the installed Trellian FTP version and saves the result in KB. OpenVAS Vulnerability Test $Id: secpodtrellianftpdetect.nasl 5372 2017-02-20 16:26:11Z cfi $ Trellian FTP Version Detection Authors: Sooraj KS Copyright: Copyright c 2010 SecPod, http://www.secpod.com This program is...

aMSN Detection (Windows SMB Login)

This script detects the installed version of aMSN. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Tests if all Registry entrys set to prevent SYN-Attacks at an IIS Server (win)

Tests if all Registry entrys set to prevent SYN-Attacks at an IIS Server. OpenVAS Vulnerability Test $Id: GSHBWMIIISProtectSynAttack.nasl 7061 2017-09-05 11:50:40Z teissa $ Tests if all Registry entrys set to prevent SYN-Attacks at an IIS Server win Authors: Thomas Rotter Copyright: Copyright c...

Get Screensaver Status for ALL Users (Windows)

The script detects if Screensaver is activated and secured. OpenVAS Vulnerability Test $Id: GSHBWMIScreenSaverStatus.nasl 7076 2017-09-07 11:53:47Z teissa $ Get Screensaver Status for ALL Users Windows Authors: Thomas Rotter Copyright: Copyright c 2010 Greenbone Networks GmbH,...

Get all Windows non System Services, Service start modes and Eventlog Servicestate over WMI - Windows

Get all Windows non System Services, Service start modes and Eventlog Servicestate over WMI. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Checks over WMI, if hiberfile.sys exists - Windows

Checks over WMI, if hiberfile.sys exists. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.96051";...

Checks XP Internetcommunication of some Programs - Windows

The script Checks XP Internetcommunication of some Programs: Internet Explorer Windows Media Player Windows Messenger Windows Zeitdienst Hilfe- und Supportcenter Windows Update Gerätemanager Windows Aktivierung und Registrierung Aktualisierung der Stammzertifikate Ereignisanzeige Webdienst...

Ipswitch WS_FTP Professional Detection (Windows SMB Login)

SMB login-based detection of Ipswitch WSFTP Professional. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

wireshark: invalid pointer dereference in SMB/SMB2 dissectors

The 1 SMB and 2 SMB2 dissectors in Wireshark 0.9.0 through 1.2.4 allow remote attackers to cause a denial of service crash via a crafted packet that triggers a NULL pointer dereference, as demonstrated by fuzz-2009-12-07-11141.pcap...

Sun Java Web Start command-line argument injection

Added: 04/20/2010 CVE: CVE-2010-0886 BID: 39492 OSVDB: 63798 Background Sun Java Web Start allows standalone Java applications, called JNLP files, to be executed by the Java Runtime Environment JRE. Problem A vulnerability in Sun Java Web Start allows execution of arbitrary commands which are...

Sun Java Web Start command-line argument injection

Added: 04/20/2010 CVE: CVE-2010-0886 BID: 39492 OSVDB: 63798 Background Sun Java Web Start allows standalone Java applications, called JNLP files, to be executed by the Java Runtime Environment JRE. Problem A vulnerability in Sun Java Web Start allows execution of arbitrary commands which are...

Sun Java Web Start command-line argument injection

Added: 04/20/2010 CVE: CVE-2010-0886 BID: 39492 OSVDB: 63798 Background Sun Java Web Start allows standalone Java applications, called JNLP files, to be executed by the Java Runtime Environment JRE. Problem A vulnerability in Sun Java Web Start allows execution of arbitrary commands which are...