Telnet NTLM Credential Reflection Authentication Bypass Vulnerability (960859)

This host is missing a critical security update according to Microsoft Bulletin MS09-042. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Windows Telnet credential reflection

Added: 08/12/2009 CVE: CVE-2009-1930 BID: 35993 OSVDB: 56904 Background Microsoft Windows operating systems come with a telnet service. This service prompts a user to provide a login name and password. Following successful authentication, the server displays a shell prompt, allowing the user to r...

PT-2009-4388 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions prior to the fixed version Description: The issue allows remote Telnet servers to execute arbitrary code on a client machine by replaying the NTLM credentials of a client user. This is related to a credential...

Windows Telnet credential reflection

Added: 08/12/2009 CVE: CVE-2009-1930 BID: 35993 OSVDB: 56904 Background Microsoft Windows operating systems come with a telnet service. This service prompts a user to provide a login name and password. Following successful authentication, the server displays a shell prompt, allowing the user to r...

Microsoft Windows Telnet NTLM凭据反射绕过认证漏洞（MS09-042）

BUGTRAQ ID: 35993 CVECAN ID: CVE-2009-1930 Microsoft Windows是微软发布的非常流行的操作系统。 Telnet协议未正确地选择加入NTLM凭据反射保护以确保用户凭据不被反射回来并供用户使用。如果用户受骗连接到了恶意的Telnet服务器，就可能导致反射NTLM凭据并以当前用户的权限获得系统访问。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Vista SP2 Microsoft Windows Vista SP1 Microsoft Windo...

Telnet NTLM Credential Reflection Authentication Bypass Vulnerability (960859)

This host is missing a critical security update according to Microsoft Bulletin MS09-042. OpenVAS Vulnerability Test $Id: secpodms09-042.nasl 5363 2017-02-20 13:07:22Z cfi $ Telnet NTLM Credential Reflection Authentication Bypass Vulnerability 960859 Authors: Nikita MR Updated By: Madhuri D on...

Windows Telnet credential reflection

Added: 08/12/2009 CVE: CVE-2009-1930 BID: 35993 OSVDB: 56904 Background Microsoft Windows operating systems come with a telnet service. This service prompts a user to provide a login name and password. Following successful authentication, the server displays a shell prompt, allowing the user to r...

Inside Microsoft Patch Tuesday: Revenge of the ActiveX Controls

Microsoft has released nine bulletins today, five of them Critical, four of them Important. The bulletins cover a gamut of affected products – almost everything in your enterprise will need to be patched today with the exception of Internet Explorer. No IE patches this month! The majority of...

MS09-042: Vulnerability in Telnet Could Allow Remote Code Execution (960859)

The remote Telnet client does not correctly opt in to NTLM credential- reflection protections, which ensure that a user's credentials are not reflected back and used against the user. If a remote attacker can trick a user on the host into connecting to a malicious server with an affected version ...

Microsoft Telnet Services Credential Reflection Code Execution (MS09-042; CVE-2009-1930)

Telnet is a bidirectional communications protocol that allows for command line remote administration over the TCP protocol. A remote code execution vulnerability has been reported in the way Microsoft Windows Telnet Service handles NTLM credentials. The vulnerability is due to an error in the...

Microsoft Security Bulletin MS09-042 - Important Vulnerability in Telnet Could Allow Remote Code Execution (960859)

Microsoft Security Bulletin MS09-042 - Important Vulnerability in Telnet Could Allow Remote Code Execution 960859 Published: August 11, 2009 Version: 1.0 General Information Executive Summary This security update resolves a publicly disclosed vulnerability in the Microsoft Telnet service. The...

Microsoft telnet NTLM relaying

NTLM relaying attack against telnet client authentication is possible...

Microsoft Windows Telnet NTLM Credential Reflection Authentication Bypass Vulnerability

Description Microsoft Windows is prone to an authentication-bypass vulnerability in the Telnet protocol. An attacker can exploit this issue to gain unauthorized access to the affected computer with the privileges of the victim. Successful exploits may compromise the affected computer. Technologie...

ncrack: telnet

This VT is deprecated. Copyright C 2009 Vlatko Kosturjak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it unde...

[SECURITY] Fedora 10 Update: pcmanx-gtk2-0.3.8-12.fc10

An easy-to-use telnet client mainly targets BBS users. PCMan X is a newly developed GPL'd version of PCMan, a full-featured famous BBS client formerly designed for MS Windows only. It aimed to be an easy-to-use yet full-featured telnet client facilitating BBS browsing with the ability to process...

[SECURITY] Fedora 10 Update: pcmanx-gtk2-0.3.8-11.fc10

An easy-to-use telnet client mainly targets BBS users. PCMan X is a newly developed GPL'd version of PCMan, a full-featured famous BBS client formerly designed for MS Windows only. It aimed to be an easy-to-use yet full-featured telnet client facilitating BBS browsing with the ability to process...

OpenWrt Router with a Blank Password (telnet check)

The remote host is running OpenWrt, an open source Linux distribution for embedded devices, especially routers. It is currently configured without a password, which is the case by default. Anyone can connect to the device via Telnet and gain administrative access to it. %NASLMINLEVEL 70300 C...

Default credentials

The Huawei D100 has 1 a certain default administrator password for the web interface, and does not force a password change; and has 2 a default password of admin for the admin account in the telnet interface; which makes it easier for remote attackers to obtain access...

CVE-2009-2271

The Huawei D100 has 1 a certain default administrator password for the web interface, and does not force a password change; and has 2 a default password of admin for the admin account in the telnet interface; which makes it easier for remote attackers to obtain access...

Multiple Flaws in Huawei D100

Multiple Flaws in Huawei D100 by Filip Palian filip dot palian at pjwstk dot edu dot pl Description: Huawei D100 is a device offered by the polish telecom operator - Play, to provide broadband Internet in CDMA technology and it's already widely in use. Overview: Huawei D100 firmware and its defau...