Design/Logic Flaw

The SMB client in the kernel in Microsoft Windows Server 2008 R2 and Windows 7 allows remote SMB servers and man-in-the-middle attackers to cause a denial of service infinite loop and system hang via a 1 SMBv1 or 2 SMBv2 response packet that contains a an incorrect length value in a NetBIOS heade...

CVE-2009-3676

The SMB client in the kernel in Microsoft Windows Server 2008 R2 and Windows 7 allows remote SMB servers and man-in-the-middle attackers to cause a denial of service infinite loop and system hang via a 1 SMBv1 or 2 SMBv2 response packet that contains a an incorrect length value in a NetBIOS heade...

CVE-2009-3676

The SMB client in the kernel in Microsoft Windows Server 2008 R2 and Windows 7 allows remote SMB servers and man-in-the-middle attackers to cause a denial of service infinite loop and system hang via a 1 SMBv1 or 2 SMBv2 response packet that contains a an incorrect length value in a NetBIOS heade...

CVE-2009-3676

The CVE-2009-3676 entry concerns a Denial of Service in the kernel SMB client of Windows 7 and Windows Server 2008 R2 caused by incomplete SMB responses (SMBv1 and SMBv2). A remote attacker or a man‑in‑the‑middle could trigger an infinite loop by sending a crafted SMB response, potentially freezi...

CVE-2009-3676: Undefined Security Weakness

The SMB client in the kernel in Microsoft Windows Server 2008 R2 and Windows 7 allows remote SMB servers and man-in-the-middle attackers to cause a denial of service infinite loop and system hang via a 1 SMBv1 or 2 SMBv2 response packet that contains a an incorrect length value in a NetBIOS heade...

Server Message Block Bug Crashes Windows 7

Security researcher Laurent Gaffie unveiled a new unpatched bug in Windows 7 and Server 2008 R2 that, when exploited, locks up the system, requiring a total shutdown to regain control. Microsoft acknowledged that it’s investigating the flaw. Read the full article. Computerworld...

Microsoft Windows 7 & 2008 'KeAccumulateTicks()' SMB2 Packet Remote Denial of Service

No description provided by source. win7-crash.py: Trigger a remote kernel crash on Win7 and server 2008R2 infinite loop Crash in KeAccumulateTicks due to NTASSERT/DbgRaiseAssertionFailure caused by an infinite loop. NO BSOD, YOU GOTTA PULL THE PLUG. To trigger it fast from the target:...

Windows 7 / Server 2008R2 Remote Kernel Crash

Exploit for unknown platform in category dos / poc ============================================= Windows 7 / Server 2008R2 Remote Kernel Crash ============================================= Title: Windows 7 / Server 2008R2 Remote Kernel Crash CVE-ID: OSVDB-ID: Author: Laurent Gaffie Published:...

Microsoft Security Bulletin MS09-064 - Critical Vulnerability in License Logging Server Could Allow Remote Code Execution (974783)

Microsoft Security Bulletin MS09-064 - Critical Vulnerability in License Logging Server Could Allow Remote Code Execution 974783 Published: November 10, 2009 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability in Microsoft Windows...

Microsoft Windows 7/2008 R2 - Remote Kernel Crash

!/usr/bin/python win7-crash.py: Trigger a remote kernel crash on Win7 and server 2008R2 infinite loop Crash in KeAccumulateTicks due to NTASSERT/DbgRaiseAssertionFailure caused by an infinite loop. NO BSOD, YOU GOTTA PULL THE PLUG. To trigger it fast; from the target: \thisscriptipaddr\BLAH ,...

WMI Antivirus Status - Windows

Tests WMI AntiVirus Status. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.96011";...

Windows 7 Security Story May Appeal to Enterprises

Microsoft Windows 7 is on its way tomorrow, and it is bringing with it a set of security features Microsoft hopes will appeal to enterprises. The Windows 7 security story has three main chapters that have received a fair amount of attention – DirectAccess, BitLocker To Go and AppLocker. With thes...

smb 0day network penetration and Defense-vulnerability warning-the black bar safety net

This smb 0day vulnerabilities out for a long time, since the bun work is too busy, has not bother to pay attention to it. The vulnerability affects vista, Windows 7 and windows 2 0 0 8, EXP now surely everyone on hand the others also have, it was tested can be very good to attack vista and 2 0 0 ...

Mandrake Security Advisory MDVSA-2009:277 (samba)

The remote host is missing an update to samba announced via advisory MDVSA-2009:277. OpenVAS Vulnerability Test $Id: mdksa2009277.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:277 samba Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Microsoft Windows SMB2 Negotiation Protocol RCE Vulnerability

This host is missing a critical security update according to Microsoft Bulletin MS09-050. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Mandriva Linux Security Advisory : samba (MDVSA-2009:277)

Multiple vulnerabilities has been found and corrected in samba : The SMB aka Samba subsystem in Apple Mac OS X 10.5.8, when Windows File Sharing is enabled, does not properly handle errors in resolving pathnames, which allows remote authenticated users to bypass intended sharing restrictions, and...

October Microsoft Patch Tuesday Has Something for Everyone

By Jason Miller Microsoft has released 13 new security bulletins in the October 2009 version of Patch Tuesday. Eight bulletins have a severity rating of Critical. The remaining five security bulletins have a severity rating of Important. For the first time, Windows 7 and Windows 2008 R2 are...

PT-2009-4928 · Microsoft · Windows Server 2003 +4

Name of the Vulnerable Software and Affected Versions: Microsoft Windows XP versions SP2 through SP3 Microsoft Windows Server 2003 version SP2 Microsoft Windows Vista versions Gold through SP2 Microsoft Windows Server 2008 versions Gold through SP2 and R2 Microsoft Windows 7 affected versions not...

Microsoft Windows ATL COM Initialization Code Execution Vulnerability (973525)

This host is missing a critical security update according to Microsoft Bulletin MS09-055. OpenVAS Vulnerability Test $Id: secpodms09-055.nasl 8724 2018-02-08 15:02:56Z cfischer $ Microsoft Windows ATL COM Initialization Code Execution Vulnerability 973525 Authors: Sharath S Updated By: Madhuri D ...

Microsoft Security Bulletin MS09-061 - Critical Vulnerabilities in the Microsoft .NET Common Language Runtime Could Allow Remote Code Execution (974378)

Microsoft Security Bulletin MS09-061 - Critical Vulnerabilities in the Microsoft .NET Common Language Runtime Could Allow Remote Code Execution 974378 Published: October 13, 2009 Version: 1.0 General Information Executive Summary This security update resolves three privately reported...