MS16-016: Description of the security update for WebDAV: February 9, 2016

None None...

MS16-016: Security Update for WebDAV to Address Elevation of Privilege (3136041)

The remote Windows host is missing a security update. It is, therefore, affected by a flaw in the Microsoft Web Distributed Authoring and Versioning WebDAV client due to improper validation of user-supplied input. A local attacker can exploit this, via a specially crafted application, to execute...

Fedora 22 : owncloud-8.0.10-1.fc22 (2016-9422448006)

This update provides the new upstream patch release of ownCloud 7.0.12 for EPEL 6, 8.0.10 for all other distributions. It also adds a 'well-known' redirect for WebDAV alongside the existing ones for CalDAV and CardDAV - if you don't know what this is, don't worry. These are bugfix updates which...

[SECURITY] Fedora 23 Update: owncloud-8.0.10-1.fc23

ownCloud gives you universal access to your files through a web interface or WebDAV. It also provides a platform to easily view & sync your contacts, calendars and bookmarks across all your devices and enables basic editing r ight on the web. ownCloud is extendable via a simple but powerful API f...

BlueControl 3.5 SR5 Insecure Library Loading Arbitrary Code Execution

Summary Engineering Tool for West Pro Series of controllers KS20-1, KS92-1, TB40-1, KS800, KS816, Dig280-1, KS vario, CI45, KS45, SG45, TB45, RL400, Pro96, CAL4600. Description BlueControl suffers from a DLL Hijacking issue. The vulnerability is caused due to the application loading libraries...

[SECURITY] Fedora 21 Update: owncloud-8.0.9-1.fc21

ownCloud gives you universal access to your files through a web interface or WebDAV. It also provides a platform to easily view & sync your contacts, calendars and bookmarks across all your devices and enables basic editing r ight on the web. ownCloud is extendable via a simple but powerful API f...

[SECURITY] Fedora 23 Update: owncloud-8.0.9-1.fc23

ownCloud gives you universal access to your files through a web interface or WebDAV. It also provides a platform to easily view & sync your contacts, calendars and bookmarks across all your devices and enables basic editing r ight on the web. ownCloud is extendable via a simple but powerful API f...

Milton Webdav Information Disclosure Vulnerability

Milton Webdav is an open source WebDAV server-side components developed by the Webdav community . A security vulnerability exists in Milton Webdav that could be exploited by remote attackers to obtain sensitive information...

Milton Webdav 2.7.0.1 XXE Injection

Dear all, I've recently found vulnerability in Milton Webdav 2.7.0.1 project page - http://milton.io/. Milton Webdav is a Java library for adding webdav capabilities to your applications. Milton Webdav supports PROPFIND, PROPPATCH and LOCK methods. This Webdav methods expect XML in request body...

Milton Webdav 2.7.0.1 XXE Injection Vulnerability

Milton Webdav version 2.7.0.1 suffers from an XXE injection vulnerability. I've recently found vulnerability in Milton Webdav 2.7.0.1 project page - http://milton.io/. Milton Webdav is a Java library for adding webdav capabilities to your applications. Milton Webdav supports PROPFIND, PROPPATCH a...

Immunity Canvas: MS15_100

Name| ms15100 ---|--- CVE| CVE-2015-2509 Exploit Pack| CANVAS Description| ms15100 Notes| References: https://technet.microsoft.com/library/security/ms15-100 CVE Name: CVE-2015-2509 VENDOR: Microsoft NOTES: Tested on: Windows 7 SP132 bits Windows 7 SP164 bits Use port 80 as the server port Window...

Microsoft Windows multiple security vulnerabilities

OpenType fonts parsing code execution, multiple Internet Explorer and Edge vulnerabilities, code execution and information disclosure in system libraries, code execution via RDP and AMB, privilege escalation, information disclosure via WebDAV...

Microsoft Windows WebDAV Man-in-the-Middle Information Disclosure Vulnerability (CNVD-2015-05494)

Microsoft Windows is a popular operating system. A security vulnerability exists in Microsoft Windows WebDAV where the WebDAV client allows SSL 2.0 man-in-the-middle attackers to force the encryption algorithm to downgrade to SSL 2.0 and then decrypt the communication...

CVE-2015-2476

The WebDAV client in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 supports SSL 2.0, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by...

Information disclosure

The WebDAV client in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 supports SSL 2.0, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by...

CVE-2015-2476

The WebDAV client in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 supports SSL 2.0, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by...

CVE-2015-2476

CVE-2015-2476 affects the WebDAV client in Windows platforms (e.g., Vista SP2, Server 2008 SP2/R2, Windows 7, 8/8.1, Server 2012/R2, Windows RT) where SSL 2.0 is supported. The root cause is the ability for a remote attacker to conduct a decryption attack/Information Disclosure via MITM by downgr...

Microsoft WebDAV Client Information Disclosure Vulnerability (3076949)

This host is missing an important security update according to Microsoft Bulletin MS15-089. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows WebDAV CVE-2015-2476 Man in the Middle Information Disclosure Vulnerability

Description Microsoft Windows is prone to an information disclosure vulnerability. Attackers can exploit this issue to disclose potentially sensitive information through man-in-the-middle attacks. Technologies Affected Microsoft Windows 7 for 32-bit Systems SP1 Microsoft Windows 7 for x64-based...

MS15-089: Vulnerability in WebDAV Could Allow Information Disclosure (3076949)

The remote Windows host is affected by an information disclosure vulnerability in the Microsoft Web Distributed Authoring and Versioning WebDAV client due to explicitly allowing the use of Secure Socket Layer SSL 2.0. A remote attacker can exploit this to force an encrypted SSL 2.0 session with a...