- •Установка дистрибутива BackTrack
- •Настройка сети
- •Установка сканера Nessus
- •Сканирование машины Oracle
- •Список уязвимостей
- •Vulnerability in Server Service Could Allow Remote Code Execution (917159)
- •Microsoft Windows smb Vulnerabilities Remote Code Execution (958687)
- •Microsoft Windows Server Service Crafted rpc Request Handling Remote Code Execution (958644)
- •Vulnerability in Server Service Could Allow Remote Code Execution (921883)
- •Пример удачного выполнения эксплойта
- •Уязвимые приложения
- •Vulnerability in Microsoft sql Server Could Allow Remote Code Execution (959420)
- •Microsoft sql Server 2000 'sqlvdir.Dll' ActiveX Buffer Overflow Vulnerability
- •Sql Extended Procedure Functions Contain Unchecked Buffers (q319507)
- •Buffer Overruns in sql Server 2000 Resolution Service Could Enable Code Execution (q323875)
- •Malformed rpc Request Can Cause Service Failure
- •Sql Server Text Formatting Functions Contain Unchecked Buffers
- •Microsoft msdtc Service Denial of Service Vulnerability
- •Buffer Overruns in sql Server 2000 Resolution Service Could Enable Code Execution (q323875)
- •Unauthenticated Remote Compromise in ms sql Server 2000
- •1. Internet Information Service remote set password
- •2. Vulnerability in Internet Information Services (iis) ftp Service Could Allow Remote Code Execution (2489256)
- •3. Vulnerability in Windows Internet Printing Service Could Allow Remote Code Execution (953155)
- •4. Vulnerability in Internet Information Services Could Allow Remote Code Execution (982666)
- •5. Vulnerability in Internet Information Services Could Allow Remote Code Execution (982666)
- •6. Vulnerability in Internet Information Services Could Allow Elevation of Privilege (942831)
- •7. Vulnerability in Internet Information Services Could Allow Elevation of Privilege (942831)
- •8. Vulnerability in Internet Information Services Could Allow Elevation of Privilege (942831)
7. Vulnerability in Internet Information Services Could Allow Elevation of Privilege (942831)
Дата публикации: 2009/12/29. Тип уязвимости: Обход ограничений.
Описание: Microsoft Internet Information Services (IIS) 5.x and 6.x uses only the portion of a filename before a; (semicolon) character to determine the file extension, which allows remote attackers to bypass intended extension restrictions of third-party upload applications via a filename with a (1) .asp, (2) .cer, or (3) .asa first extension, followed by a semicolon and a safe extension, as demonstrated by the use of asp.dll to handle a .asp;.jpg file.
Фактор риска: CVSS Base Score: 6.0 Идентификатор CVE: CVE-2009-4444.
Решение: Опубликованы рекомендательные инструкции к настройке продукта.
8. Vulnerability in Internet Information Services Could Allow Elevation of Privilege (942831)
Дата публикации: 2009/12/29. Тип уязвимости: Обход ограничений.
Описание: Microsoft Internet Information Services (IIS), when used in conjunction with unspecified third-party upload applications, allows remote attackers to create empty files with arbitrary extensions via a filename containing an initial extension followed by a : (colon) and a safe extension, as demonstrated by an upload of a .asp:.jpg file that results in creation of an empty .asp file, related to support for the NTFS Alternate Data Streams (ADS) filename syntax.
Фактор риска: CVSS Base Score: 6.0 Идентификатор CVE: CVE-2009-4445.
Решение: Отсутствует.