Búsqueda de    
Vulnerabilidad   
    Buscar 324607 Descripciones CVE y
145615 Descripciones de Pruebas,
accesos 10,000+ referencias cruzadas.
Pruebas   CVE   Todos  

ID de Prueba:1.3.6.1.4.1.25623.1.0.801711
Categoría:Windows : Microsoft Bulletins
Título:Vulnerability in SMBv2 Could Allow Remote Code Execution (942624)
Resumen:This host is missing a critical security update according to; Microsoft Bulletin MS07-063.
Descripción:Summary:
This host is missing a critical security update according to
Microsoft Bulletin MS07-063.

Vulnerability Insight:
The flaw is due to an improper implementation of SMBv2 signing and can
be exploited to execute arbitrary code by spoofing the signature in a SMBv2
packet to a trusted host.

Vulnerability Impact:
Successful exploitation allows remote attackers to execute arbitrary code
in the context of logged-in users.

Affected Software/OS:
Microsoft Windows Vista.

Solution:
The vendor has released updates. Please see the references for more information.

CVSS Score:
10.0

CVSS Vector:
AV:N/AC:L/Au:N/C:C/I:C/A:C

Referencia Cruzada: Common Vulnerability Exposure (CVE) ID: CVE-2007-5351
BugTraq ID: 26777
http://www.securityfocus.com/bid/26777
Cert/CC Advisory: TA07-345A
http://www.us-cert.gov/cas/techalerts/TA07-345A.html
CERT/CC vulnerability note: VU#520465
http://www.kb.cert.org/vuls/id/520465
HPdes Security Advisory: HPSBST02299
http://www.securityfocus.com/archive/1/485268/100/0/threaded
HPdes Security Advisory: SSRT071506
Microsoft Security Bulletin: MS07-063
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-063
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4208
http://www.securitytracker.com/id?1019072
http://secunia.com/advisories/27997
http://www.vupen.com/english/advisories/2007/4179
XForce ISS Database: win-vista-smbv2-code-execution(38725)
https://exchange.xforce.ibmcloud.com/vulnerabilities/38725
CopyrightCopyright (C) 2011 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa.

Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.




© 1998-2025 E-Soft Inc. Todos los derechos reservados.