samba security, bug fix, and enhancement update

4.9.1-6 - related: 1703204 - Fix printing with smbspool as CUPS backend 4.9.1-5 - resolves: 1703204 - Fix smbspool krb5 authentication 4.9.1-4 - resolves: 1690222 - Fix --max-protocol documentation of smbclient - resolves: 1518353 - Fix 'net ads join -Uadmin@forestdomain' - resolves: 1696524 - Fi...

Microsoft Windows: Microsoft network server: Server SPN target name validation level

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winnsspnvalidationlevel.nasl 11532 2018-09-21 19:07:30Z cfischer $ Check value for Microsoft network server: Server SPN target name validation level Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

SPN Discovery

Services that support Kerberos authentication require to have a Service Principal Name SPN associated to point users to the appropriate resource for connection. Discovery of SPNs inside an internal network is performed via LDAP queries and can assist red teams to identify hosts that are running...

Goddi (Go Dump Domain Info) - Dumps Active Directory Domain Information

Based on work from Scott Sutherland @nullbind, Antti Rantasaari, Eric Gruber @egru, Will Schroeder @harmj0y, and the PowerView authors. Install Use the executables in the releases section. If you want to build it yourself, make sure that your go environment is setup according to the Go setup doc...

Dump Active Directory Domain Information: goddi

goddi go dump domain info dumps domain users, groups, domain controllers, and more in CSV output and it runs on Windows and Linux. Functionality StartTLS and TLS tls.Client func connections supported. Connections over TLS are default. All output goes to CSVs and are created in /csv/ in the curren...

Gather Ticket Granting Service (TGS) tickets for User Service Principal Names (SPN)

This module will try to find Service Principal Names that are associated with normal user accounts. Since normal accounts' passwords tend to be shorter than machine accounts, and knowing that a TGS request will encrypt the ticket with the account the SPN is running under, this could be used for a...

Helping Mobile Operators Keep Customers Safe with Virtualized Network Security

At Trend Micro we’re always looking for innovative new ways to support our customers and help overcome their cybersecurity challenges. Mobile network operators MNOs are increasingly adopting virtualization and software acceleration technologies to become more agile in how they deploy and operate...

CentOS 6 : cifs-utils (CESA-2012:0902)

An updated cifs-utils package that fixes one security issue, multiple bugs, and adds various enhancements is now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score,...

Distinct TFTP 3.10 Writable Directory Traversal Execution

This module exploits a directory traversal vulnerability in the TFTP Server component of Distinct Intranet Servers version 3.10 which allows a remote attacker to write arbitrary files to the server file system, resulting in code execution under the context of 'SYSTEM'. This module has been tested...

Input validation

The server in Microsoft Active Directory on Windows Server 2003 SP2 does not properly handle an update request for a service principal name SPN, which allows remote attackers to cause a denial of service authentication downgrade or outage via a crafted request that triggers name collisions, aka...

Microsoft Windows Active Directory SPN Denial of Service (2478953)

This host is missing a critical security update according to Microsoft Bulletin MS11-005. OpenVAS Vulnerability Test $Id: secpodms11-005.nasl 5362 2017-02-20 12:46:39Z cfi $ Microsoft Windows Active Directory SPN Denial of Service 2478953 Authors: Antu Sanadi Copyright: Copyright c 2011 SecPod,...

CVE-2011-0040

The server in Microsoft Active Directory on Windows Server 2003 SP2 does not properly handle an update request for a service principal name SPN, which allows remote attackers to cause a denial of service authentication downgrade or outage via a crafted request that triggers name collisions, aka...

Microsoft Active Directory DoS

Crash on SPN processing...

Microsoft Active Directory SPN Validation Denial of Service (MS11-005; CVE-2011-0040)

A denial of service vulnerability has been reported in implementations of Microsoft Windows Active Directory due to improper validation of service principal names SPN, which could result in SPN collisions The vulnerability is due to an error in Active Directory that fails to properly process...

MS11-005: Vulnerability in Active Directory Could Allow Denial of Service (2478953)

The version of Active Directory installed on the remote host fails to properly validate service principal names SPN, which could result in SPN collisions. If a collision occurs, services that use the SPN will downgrade to NTLM when configured to do so. Services that are not configured to negotiat...

Microsoft Windows媒体组件SPN实现远程代码执行漏洞（MS08-076）

BUGTRAQ ID: 32653 CVECAN ID: CVE-2008-3009 Windows媒体组件包括Windows Media Player、Windows Media Format Runtime和Windows Media Services等多种服务和应用。 Windows媒体组件在使用NTLM认证协议（具体来说，是SPN）的方式存在安全漏洞。在访问媒体之前，服务器会提示一些使用Windows媒体组件的媒体播放器（如Windows Media...

Design/Logic Flaw

Microsoft Windows Media Player 6.4, Windows Media Format Runtime 7.1 through 11, and Windows Media Services 4.1, 9, and 2008 do not properly use the Service Principal Name SPN identifier when validating replies to authentication requests, which allows remote servers to execute arbitrary code via...

CVE-2008-3009

The CVE-2008-3009 issue affects Windows Media components: Windows Media Player 6.4, Windows Media Format Runtime (7.1–11), and Windows Media Services (4.1, 9, 2008). It stems from improper handling of SPNs during NTLM authentication, enabling a remote attacker to perform credential reflection and...

CVE-2008-3009

Microsoft Windows Media Player 6.4, Windows Media Format Runtime 7.1 through 11, and Windows Media Services 4.1, 9, and 2008 do not properly use the Service Principal Name SPN identifier when validating replies to authentication requests, which allows remote servers to execute arbitrary code via...

MS08-076: Vulnerabilities in Windows Media Components Could Allow Remote Code Execution (959807)

The remote host is running Windows Media Player/Components. There is a vulnerability in the remote version of this software that may allow an attacker to execute arbitrary code on the remote host thru flaws in ISATAP and SPN. C Tenable Network Security, Inc. include"compat.inc"; if description...