251 matches found
NTLM buffer overflow via integer overflow
libcurl contains a buffer overrun flaw in the NTLM authentication code. The internal function Curlntlmcoremkntlmv2hash sums up the lengths of the username + password = SUM and multiplies the sum by two = SIZE to figure out how large storage to allocate from the heap. The SUM value is subsequently...
The vulnerability of the Windows operating system’s network authentication protocol, NT LAN Manager (NTLM), allows a hacker to access user password hashes.
The vulnerability of the Windows operating system’s Network Authentication Protocol NTLM exists due to the incorrect implementation of the NTLM authentication algorithm. Exploiting this vulnerability allows a malicious actor to obtain access to user password hashes through a specially crafted SCF...
How to Deploy Veeam Configuration Database in SQL AlwaysOn Availability Group
Multi-subnet SQL AlwaysOn clusters are not supported for hosting the Veeam Backup & Replication or Veeam Backup Enterprise Manager configuration databases. Purpose This article provides information on using a SQL AlwaysOn Availability Group to host the Veeam Backup & Replication and/or Veeam Back...
MS16-137: Description of the security update for Windows authentication methods: November 8, 2016
None None...
November 2016 Security Only Quality Update for Windows 8.1, and Windows Server 2012 R2
November 2016 Security Only Quality Update for Windows 8.1, and Windows Server 2012 R2 Summary This security update resolves the following vulnerabilities in Windows 8.1 and Windows Server 2012 R2: MS16-142 Cumulative security update for Internet Explorer: November 8, 2016 MS16-140 Security updat...
Cumulative update for Windows 10: November 8, 2016
None None...
MS16-137: Security update for Windows authentication methods: November 8, 2016
Resolves a vulnerability in Windows that could allow elevation of privilege.SummaryThis security update resolves vulnerabilities in Microsoft Windows. The more severe of the vulnerabilities could allow elevation of privilege. To exploit this vulnerability, the attacker would first have to...
October 2016 Security Only Quality Update for Windows 8.1 and Windows Server 2012 R2
October 2016 Security Only Quality Update for Windows 8.1 and Windows Server 2012 R2 Summary This security update resolves the following vulnerabilities in Windows 8.1, and Windows Server 2012 R2: MS16-101 Security update for Windows authentication methods MS16-118 Cumulative security update for...
Cumulative update for Windows 10 Version 1607 and Windows Server 2016: October 11, 2016
None None...
Cumulative update for Windows 10 Version 1511: August 9, 2016
None None...
Cumulative update for Windows 10: August 9, 2016
None None...
MS16-101: Description of the security update for Windows authentication methods: August 9, 2016
None None...
Cumulative update for Windows 10 Version 1607: August 9, 2016
None None...
August 9, 2016 — KB3176495 (OS Build 14393.51)
None None...
MS16-101: Security update for Windows authentication methods: August 9, 2016
Resolves vulnerabilities in Windows that could allow elevation of privilege if an attacker runs a specially crafted application on a domain-joined system.Important This article contains information that shows you how to help lower security settings or how to turn off security features on a...
MS16-101: Security Update for Windows Authentication Methods (3178465)
The remote Windows host is missing a security update. It is, therefore, affected by multiple vulnerabilities : - A security downgrade vulnerability exists in Kerberos due to improper handling of password change requests. A man-in-the-middle attacker can exploit this to cause the authentication...
NTLM Authentication on NetScaler
With the release of NetScaler 11 build 64.34, the requirements and configuration for NTLM authentication have changed. It is a common use case to authenticate using Kerberos when users are internal on the network but for external users who cannot reach Active Directory, we fallback to NTLM. The...
How to Force Enterprise Manager Login to Use Form-Based Authentication
Article Applicability This article applies to Veeam Backup & Replication 12.x and older, as in those versions, the default was for Veeam Backup Enterprise Manager to utilize a Windows Authentication pop-up key="useWindowsAuth" value="true". Starting in Veeam Backup Enterprise Manager v13, the...
DEBIAN-CVE-2015-3143
cURL and libcurl 7.10.6 through 7.41.0 does not properly re-use NTLM connections, which allows remote attackers to connect as other users via an unauthenticated request, a similar issue to CVE-2014-0015...
Microsoft Windows NTLM Man-in-the-Middle Information Disclosure Vulnerability
Windows Challenge/Response NTLM is used for network authentication protocols, both on systems running the Windows operating system and on standalone systems. A man-in-the-middle information disclosure vulnerability exists in Microsoft Windows NTLM. This vulnerability could be exploited by an...