Vulnerability   
Search   
    Search 324607 CVE descriptions
and 146377 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.11830
Category:Windows
Title:NetBIOS Name Service Reply Information Leakage
Summary:NOSUMMARY
Description:Description:

The remote host is running a version of the NetBT name
service which suffers from a memory disclosure problem.

An attacker may send a special packet to the remote NetBT name
service, and the reply will contain random arbitrary data from
the remote host memory. This arbitrary data may be a fragment from
the web page the remote user is viewing, or something more serious
like a POP password or anything else.

An attacker may use this flaw to continuously 'poll' the content
of the memory of the remote host and might be able to obtain sensitive
information.


Solution : See http://www.microsoft.com/technet/security/bulletin/ms03-034.mspx
Risk factor : Medium

Cross-Ref: BugTraq ID: 8532
Common Vulnerability Exposure (CVE) ID: CVE-2003-0661
CERT/CC vulnerability note: VU#989932
http://www.kb.cert.org/vuls/id/989932
Microsoft Security Bulletin: MS03-034
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-034
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3483
CopyrightThis script is Copyright (C) 2003 Tenable Network Security

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2025 E-Soft Inc. All rights reserved.