JVN Info.

Id
16639  
Name
JVNDB-2014-005514  
Title
cURL および libcurl における同一生成元ポリシーを回避される脆弱性  
Summary
cURL および libcurl には、同一生成元ポリシーを回避され、任意のサイトに Cookie を設定される脆弱性が存在します。  
Nvdinfo
CVE-2014-3620  
Cvssv2
5  
Jvnurl
http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-005514.html  
Published Date
2014-09-10  
Registered Date
2014-11-19  
Last Updated Date
2015-08-31  

Actions

Related Nessuslogs

Id Log ID Jvninfo Id Plugin ID CVE CVSS Risk Host Protocol Port Name Synopsis Description Solution See Also Plugin Output Actions
2438 H28-MOJ-Online-Nara-11-Seg-1-20161126-Endo_oxa90g.csv 16639 90510 CVE-2016-0128 6.8 Medium 172.27.132.45 tcp 49154 MS16-047: Security Update for SAM and LSAD Remote Protocols (3148527) (Badlock) (uncredentialed check) The remote Windows host is affected by an elevation of privilege vulnerability. The remote Windows host is affected by an elevation of privilege vulnerability in the Security Account Manager (SAM) and Local Security Authority (Domain Policy) (LSAD) protocols due to improper authentication level negotiation over Remote Procedure Call (RPC) channels. A man-in-the-middle attacker able to intercept communications between a client and a server hosting a SAM database can exploit this to force the authentication level to downgrade, allowing the attacker to impersonate an authenticated user and access the SAM database. Microsoft has released a set of patches for Windows Vista, 2008, 7, 2008 R2, 2012, 8.1, RT 8.1, 2012 R2, and 10. https://technet.microsoft.com/library/security/MS16-047 http://badlock.org/
2679 H28-MOJ-Online-Nara-11-Seg-1-20161126-Endo_oxa90g.csv 16639 90510 CVE-2016-0128 6.8 Medium 172.27.132.57 tcp 49154 MS16-047: Security Update for SAM and LSAD Remote Protocols (3148527) (Badlock) (uncredentialed check) The remote Windows host is affected by an elevation of privilege vulnerability. The remote Windows host is affected by an elevation of privilege vulnerability in the Security Account Manager (SAM) and Local Security Authority (Domain Policy) (LSAD) protocols due to improper authentication level negotiation over Remote Procedure Call (RPC) channels. A man-in-the-middle attacker able to intercept communications between a client and a server hosting a SAM database can exploit this to force the authentication level to downgrade, allowing the attacker to impersonate an authenticated user and access the SAM database. Microsoft has released a set of patches for Windows Vista, 2008, 7, 2008 R2, 2012, 8.1, RT 8.1, 2012 R2, and 10. https://technet.microsoft.com/library/security/MS16-047 http://badlock.org/
3410 H28-MOJ-Online-Nara-11-Seg-2-20161126-Endo_rsvx6u.csv 16639 90510 CVE-2016-0128 6.8 Medium 172.27.132.46 tcp 49154 MS16-047: Security Update for SAM and LSAD Remote Protocols (3148527) (Badlock) (uncredentialed check) The remote Windows host is affected by an elevation of privilege vulnerability. The remote Windows host is affected by an elevation of privilege vulnerability in the Security Account Manager (SAM) and Local Security Authority (Domain Policy) (LSAD) protocols due to improper authentication level negotiation over Remote Procedure Call (RPC) channels. A man-in-the-middle attacker able to intercept communications between a client and a server hosting a SAM database can exploit this to force the authentication level to downgrade, allowing the attacker to impersonate an authenticated user and access the SAM database. Microsoft has released a set of patches for Windows Vista, 2008, 7, 2008 R2, 2012, 8.1, RT 8.1, 2012 R2, and 10. https://technet.microsoft.com/library/security/MS16-047 http://badlock.org/
3652 H28-MOJ-Online-Nara-11-Seg-2-20161126-Endo_rsvx6u.csv 16639 90510 CVE-2016-0128 6.8 Medium 172.27.132.58 tcp 49154 MS16-047: Security Update for SAM and LSAD Remote Protocols (3148527) (Badlock) (uncredentialed check) The remote Windows host is affected by an elevation of privilege vulnerability. The remote Windows host is affected by an elevation of privilege vulnerability in the Security Account Manager (SAM) and Local Security Authority (Domain Policy) (LSAD) protocols due to improper authentication level negotiation over Remote Procedure Call (RPC) channels. A man-in-the-middle attacker able to intercept communications between a client and a server hosting a SAM database can exploit this to force the authentication level to downgrade, allowing the attacker to impersonate an authenticated user and access the SAM database. Microsoft has released a set of patches for Windows Vista, 2008, 7, 2008 R2, 2012, 8.1, RT 8.1, 2012 R2, and 10. https://technet.microsoft.com/library/security/MS16-047 http://badlock.org/
5098 H28-MOJ-Online-Nara-13-Seg-1-20161126-Endo_9whfs5.csv 16639 90510 CVE-2016-0128 6.8 Medium 172.27.134.53 tcp 49154 MS16-047: Security Update for SAM and LSAD Remote Protocols (3148527) (Badlock) (uncredentialed check) The remote Windows host is affected by an elevation of privilege vulnerability. The remote Windows host is affected by an elevation of privilege vulnerability in the Security Account Manager (SAM) and Local Security Authority (Domain Policy) (LSAD) protocols due to improper authentication level negotiation over Remote Procedure Call (RPC) channels. A man-in-the-middle attacker able to intercept communications between a client and a server hosting a SAM database can exploit this to force the authentication level to downgrade, allowing the attacker to impersonate an authenticated user and access the SAM database. Microsoft has released a set of patches for Windows Vista, 2008, 7, 2008 R2, 2012, 8.1, RT 8.1, 2012 R2, and 10. https://technet.microsoft.com/library/security/MS16-047 http://badlock.org/
5317 H28-MOJ-Online-Nara-13-Seg-2-20161126-Endo_0pcahr.csv 16639 90510 CVE-2016-0128 6.8 Medium 172.27.134.54 tcp 49154 MS16-047: Security Update for SAM and LSAD Remote Protocols (3148527) (Badlock) (uncredentialed check) The remote Windows host is affected by an elevation of privilege vulnerability. The remote Windows host is affected by an elevation of privilege vulnerability in the Security Account Manager (SAM) and Local Security Authority (Domain Policy) (LSAD) protocols due to improper authentication level negotiation over Remote Procedure Call (RPC) channels. A man-in-the-middle attacker able to intercept communications between a client and a server hosting a SAM database can exploit this to force the authentication level to downgrade, allowing the attacker to impersonate an authenticated user and access the SAM database. Microsoft has released a set of patches for Windows Vista, 2008, 7, 2008 R2, 2012, 8.1, RT 8.1, 2012 R2, and 10. https://technet.microsoft.com/library/security/MS16-047 http://badlock.org/
6576 H28-MOJ-Online-Nara-16-seg-1-20161126-soga_ubl064.csv 16639 90510 CVE-2016-0128 6.8 Medium 172.27.137.45 tcp 49154 MS16-047: Security Update for SAM and LSAD Remote Protocols (3148527) (Badlock) (uncredentialed check) The remote Windows host is affected by an elevation of privilege vulnerability. The remote Windows host is affected by an elevation of privilege vulnerability in the Security Account Manager (SAM) and Local Security Authority (Domain Policy) (LSAD) protocols due to improper authentication level negotiation over Remote Procedure Call (RPC) channels. A man-in-the-middle attacker able to intercept communications between a client and a server hosting a SAM database can exploit this to force the authentication level to downgrade, allowing the attacker to impersonate an authenticated user and access the SAM database. Microsoft has released a set of patches for Windows Vista, 2008, 7, 2008 R2, 2012, 8.1, RT 8.1, 2012 R2, and 10. https://technet.microsoft.com/library/security/MS16-047 http://badlock.org/
6726 H28-MOJ-Online-Nara-16-seg-1-20161126-soga_ubl064.csv 16639 90510 CVE-2016-0128 6.8 Medium 172.27.137.53 tcp 49154 MS16-047: Security Update for SAM and LSAD Remote Protocols (3148527) (Badlock) (uncredentialed check) The remote Windows host is affected by an elevation of privilege vulnerability. The remote Windows host is affected by an elevation of privilege vulnerability in the Security Account Manager (SAM) and Local Security Authority (Domain Policy) (LSAD) protocols due to improper authentication level negotiation over Remote Procedure Call (RPC) channels. A man-in-the-middle attacker able to intercept communications between a client and a server hosting a SAM database can exploit this to force the authentication level to downgrade, allowing the attacker to impersonate an authenticated user and access the SAM database. Microsoft has released a set of patches for Windows Vista, 2008, 7, 2008 R2, 2012, 8.1, RT 8.1, 2012 R2, and 10. https://technet.microsoft.com/library/security/MS16-047 http://badlock.org/
6899 H28-MOJ-Online-Nara-16-seg-1-20161126-soga_ubl064.csv 16639 90510 CVE-2016-0128 6.8 Medium 172.27.137.57 tcp 49154 MS16-047: Security Update for SAM and LSAD Remote Protocols (3148527) (Badlock) (uncredentialed check) The remote Windows host is affected by an elevation of privilege vulnerability. The remote Windows host is affected by an elevation of privilege vulnerability in the Security Account Manager (SAM) and Local Security Authority (Domain Policy) (LSAD) protocols due to improper authentication level negotiation over Remote Procedure Call (RPC) channels. A man-in-the-middle attacker able to intercept communications between a client and a server hosting a SAM database can exploit this to force the authentication level to downgrade, allowing the attacker to impersonate an authenticated user and access the SAM database. Microsoft has released a set of patches for Windows Vista, 2008, 7, 2008 R2, 2012, 8.1, RT 8.1, 2012 R2, and 10. https://technet.microsoft.com/library/security/MS16-047 http://badlock.org/
7474 H28-MOJ-Online-Nara-16-seg-1-20161126-soga_ubl064.csv 16639 90510 CVE-2016-0128 6.8 Medium 172.27.137.65 tcp 49154 MS16-047: Security Update for SAM and LSAD Remote Protocols (3148527) (Badlock) (uncredentialed check) The remote Windows host is affected by an elevation of privilege vulnerability. The remote Windows host is affected by an elevation of privilege vulnerability in the Security Account Manager (SAM) and Local Security Authority (Domain Policy) (LSAD) protocols due to improper authentication level negotiation over Remote Procedure Call (RPC) channels. A man-in-the-middle attacker able to intercept communications between a client and a server hosting a SAM database can exploit this to force the authentication level to downgrade, allowing the attacker to impersonate an authenticated user and access the SAM database. Microsoft has released a set of patches for Windows Vista, 2008, 7, 2008 R2, 2012, 8.1, RT 8.1, 2012 R2, and 10. https://technet.microsoft.com/library/security/MS16-047 http://badlock.org/
7648 H28-MOJ-Online-Nara-16-seg-1-20161126-soga_ubl064.csv 16639 90510 CVE-2016-0128 6.8 Medium 172.27.137.68 tcp 49154 MS16-047: Security Update for SAM and LSAD Remote Protocols (3148527) (Badlock) (uncredentialed check) The remote Windows host is affected by an elevation of privilege vulnerability. The remote Windows host is affected by an elevation of privilege vulnerability in the Security Account Manager (SAM) and Local Security Authority (Domain Policy) (LSAD) protocols due to improper authentication level negotiation over Remote Procedure Call (RPC) channels. A man-in-the-middle attacker able to intercept communications between a client and a server hosting a SAM database can exploit this to force the authentication level to downgrade, allowing the attacker to impersonate an authenticated user and access the SAM database. Microsoft has released a set of patches for Windows Vista, 2008, 7, 2008 R2, 2012, 8.1, RT 8.1, 2012 R2, and 10. https://technet.microsoft.com/library/security/MS16-047 http://badlock.org/
7859 H28-MOJ-Online-Nara-16-seg-1-20161126-soga_ubl064.csv 16639 90510 CVE-2016-0128 6.8 Medium 172.27.137.69 tcp 49154 MS16-047: Security Update for SAM and LSAD Remote Protocols (3148527) (Badlock) (uncredentialed check) The remote Windows host is affected by an elevation of privilege vulnerability. The remote Windows host is affected by an elevation of privilege vulnerability in the Security Account Manager (SAM) and Local Security Authority (Domain Policy) (LSAD) protocols due to improper authentication level negotiation over Remote Procedure Call (RPC) channels. A man-in-the-middle attacker able to intercept communications between a client and a server hosting a SAM database can exploit this to force the authentication level to downgrade, allowing the attacker to impersonate an authenticated user and access the SAM database. Microsoft has released a set of patches for Windows Vista, 2008, 7, 2008 R2, 2012, 8.1, RT 8.1, 2012 R2, and 10. https://technet.microsoft.com/library/security/MS16-047 http://badlock.org/
8012 H28-MOJ-Online-Nara-16-seg-1-20161126-soga_ubl064.csv 16639 90510 CVE-2016-0128 6.8 Medium 172.27.137.70 tcp 49154 MS16-047: Security Update for SAM and LSAD Remote Protocols (3148527) (Badlock) (uncredentialed check) The remote Windows host is affected by an elevation of privilege vulnerability. The remote Windows host is affected by an elevation of privilege vulnerability in the Security Account Manager (SAM) and Local Security Authority (Domain Policy) (LSAD) protocols due to improper authentication level negotiation over Remote Procedure Call (RPC) channels. A man-in-the-middle attacker able to intercept communications between a client and a server hosting a SAM database can exploit this to force the authentication level to downgrade, allowing the attacker to impersonate an authenticated user and access the SAM database. Microsoft has released a set of patches for Windows Vista, 2008, 7, 2008 R2, 2012, 8.1, RT 8.1, 2012 R2, and 10. https://technet.microsoft.com/library/security/MS16-047 http://badlock.org/
9378 H28-MOJ-Online-Nara-16-seg-2-20161126-soga_e6g03u.csv 16639 90510 CVE-2016-0128 6.8 Medium 172.27.137.46 tcp 49154 MS16-047: Security Update for SAM and LSAD Remote Protocols (3148527) (Badlock) (uncredentialed check) The remote Windows host is affected by an elevation of privilege vulnerability. The remote Windows host is affected by an elevation of privilege vulnerability in the Security Account Manager (SAM) and Local Security Authority (Domain Policy) (LSAD) protocols due to improper authentication level negotiation over Remote Procedure Call (RPC) channels. A man-in-the-middle attacker able to intercept communications between a client and a server hosting a SAM database can exploit this to force the authentication level to downgrade, allowing the attacker to impersonate an authenticated user and access the SAM database. Microsoft has released a set of patches for Windows Vista, 2008, 7, 2008 R2, 2012, 8.1, RT 8.1, 2012 R2, and 10. https://technet.microsoft.com/library/security/MS16-047 http://badlock.org/
9527 H28-MOJ-Online-Nara-16-seg-2-20161126-soga_e6g03u.csv 16639 90510 CVE-2016-0128 6.8 Medium 172.27.137.54 tcp 49154 MS16-047: Security Update for SAM and LSAD Remote Protocols (3148527) (Badlock) (uncredentialed check) The remote Windows host is affected by an elevation of privilege vulnerability. The remote Windows host is affected by an elevation of privilege vulnerability in the Security Account Manager (SAM) and Local Security Authority (Domain Policy) (LSAD) protocols due to improper authentication level negotiation over Remote Procedure Call (RPC) channels. A man-in-the-middle attacker able to intercept communications between a client and a server hosting a SAM database can exploit this to force the authentication level to downgrade, allowing the attacker to impersonate an authenticated user and access the SAM database. Microsoft has released a set of patches for Windows Vista, 2008, 7, 2008 R2, 2012, 8.1, RT 8.1, 2012 R2, and 10. https://technet.microsoft.com/library/security/MS16-047 http://badlock.org/
9702 H28-MOJ-Online-Nara-16-seg-2-20161126-soga_e6g03u.csv 16639 90510 CVE-2016-0128 6.8 Medium 172.27.137.58 tcp 49154 MS16-047: Security Update for SAM and LSAD Remote Protocols (3148527) (Badlock) (uncredentialed check) The remote Windows host is affected by an elevation of privilege vulnerability. The remote Windows host is affected by an elevation of privilege vulnerability in the Security Account Manager (SAM) and Local Security Authority (Domain Policy) (LSAD) protocols due to improper authentication level negotiation over Remote Procedure Call (RPC) channels. A man-in-the-middle attacker able to intercept communications between a client and a server hosting a SAM database can exploit this to force the authentication level to downgrade, allowing the attacker to impersonate an authenticated user and access the SAM database. Microsoft has released a set of patches for Windows Vista, 2008, 7, 2008 R2, 2012, 8.1, RT 8.1, 2012 R2, and 10. https://technet.microsoft.com/library/security/MS16-047 http://badlock.org/
16889 H28-MOJ-Teikyo-Nara-15-Seg-1-20161128-Endo_gheygl.csv 16639 90510 CVE-2016-0128 6.8 Medium 172.30.199.62 tcp 49154 MS16-047: Security Update for SAM and LSAD Remote Protocols (3148527) (Badlock) (uncredentialed check) The remote Windows host is affected by an elevation of privilege vulnerability. The remote Windows host is affected by an elevation of privilege vulnerability in the Security Account Manager (SAM) and Local Security Authority (Domain Policy) (LSAD) protocols due to improper authentication level negotiation over Remote Procedure Call (RPC) channels. A man-in-the-middle attacker able to intercept communications between a client and a server hosting a SAM database can exploit this to force the authentication level to downgrade, allowing the attacker to impersonate an authenticated user and access the SAM database. Microsoft has released a set of patches for Windows Vista, 2008, 7, 2008 R2, 2012, 8.1, RT 8.1, 2012 R2, and 10. https://technet.microsoft.com/library/security/MS16-047 http://badlock.org/
19088 H28-MOJ-Teikyo-Nara-17-seg-1-20161128-w510.csv 16639 90510 CVE-2016-0128 6.8 Medium 172.30.201.63 tcp 49154 MS16-047: Security Update for SAM and LSAD Remote Protocols (3148527) (Badlock) (uncredentialed check) The remote Windows host is affected by an elevation of privilege vulnerability. The remote Windows host is affected by an elevation of privilege vulnerability in the Security Account Manager (SAM) and Local Security Authority (Domain Policy) (LSAD) protocols due to improper authentication level negotiation over Remote Procedure Call (RPC) channels. A man-in-the-middle attacker able to intercept communications between a client and a server hosting a SAM database can exploit this to force the authentication level to downgrade, allowing the attacker to impersonate an authenticated user and access the SAM database. Microsoft has released a set of patches for Windows Vista, 2008, 7, 2008 R2, 2012, 8.1, RT 8.1, 2012 R2, and 10. https://technet.microsoft.com/library/security/MS16-047 http://badlock.org/
20102 H28-MOJ-Teikyo-Nara-17-seg-2-20161128-w510.csv 16639 90510 CVE-2016-0128 6.8 Medium 172.30.201.64 tcp 49154 MS16-047: Security Update for SAM and LSAD Remote Protocols (3148527) (Badlock) (uncredentialed check) The remote Windows host is affected by an elevation of privilege vulnerability. The remote Windows host is affected by an elevation of privilege vulnerability in the Security Account Manager (SAM) and Local Security Authority (Domain Policy) (LSAD) protocols due to improper authentication level negotiation over Remote Procedure Call (RPC) channels. A man-in-the-middle attacker able to intercept communications between a client and a server hosting a SAM database can exploit this to force the authentication level to downgrade, allowing the attacker to impersonate an authenticated user and access the SAM database. Microsoft has released a set of patches for Windows Vista, 2008, 7, 2008 R2, 2012, 8.1, RT 8.1, 2012 R2, and 10. https://technet.microsoft.com/library/security/MS16-047 http://badlock.org/
20361 H28-MOJ-Teikyo-Nara-17-seg-2-20161128-w510.csv 16639 90510 CVE-2016-0128 6.8 Medium 172.30.201.65 tcp 49154 MS16-047: Security Update for SAM and LSAD Remote Protocols (3148527) (Badlock) (uncredentialed check) The remote Windows host is affected by an elevation of privilege vulnerability. The remote Windows host is affected by an elevation of privilege vulnerability in the Security Account Manager (SAM) and Local Security Authority (Domain Policy) (LSAD) protocols due to improper authentication level negotiation over Remote Procedure Call (RPC) channels. A man-in-the-middle attacker able to intercept communications between a client and a server hosting a SAM database can exploit this to force the authentication level to downgrade, allowing the attacker to impersonate an authenticated user and access the SAM database. Microsoft has released a set of patches for Windows Vista, 2008, 7, 2008 R2, 2012, 8.1, RT 8.1, 2012 R2, and 10. https://technet.microsoft.com/library/security/MS16-047 http://badlock.org/
20826 H28-MOJ-Teikyo-Nara-17-seg-2-20161128-w510.csv 16639 90510 CVE-2016-0128 6.8 Medium 172.30.201.69 tcp 49154 MS16-047: Security Update for SAM and LSAD Remote Protocols (3148527) (Badlock) (uncredentialed check) The remote Windows host is affected by an elevation of privilege vulnerability. The remote Windows host is affected by an elevation of privilege vulnerability in the Security Account Manager (SAM) and Local Security Authority (Domain Policy) (LSAD) protocols due to improper authentication level negotiation over Remote Procedure Call (RPC) channels. A man-in-the-middle attacker able to intercept communications between a client and a server hosting a SAM database can exploit this to force the authentication level to downgrade, allowing the attacker to impersonate an authenticated user and access the SAM database. Microsoft has released a set of patches for Windows Vista, 2008, 7, 2008 R2, 2012, 8.1, RT 8.1, 2012 R2, and 10. https://technet.microsoft.com/library/security/MS16-047 http://badlock.org/
20964 H28-MOJ-Teikyo-Nara-17-seg-2-20161128-w510.csv 16639 90510 CVE-2016-0128 6.8 Medium 172.30.201.70 tcp 49154 MS16-047: Security Update for SAM and LSAD Remote Protocols (3148527) (Badlock) (uncredentialed check) The remote Windows host is affected by an elevation of privilege vulnerability. The remote Windows host is affected by an elevation of privilege vulnerability in the Security Account Manager (SAM) and Local Security Authority (Domain Policy) (LSAD) protocols due to improper authentication level negotiation over Remote Procedure Call (RPC) channels. A man-in-the-middle attacker able to intercept communications between a client and a server hosting a SAM database can exploit this to force the authentication level to downgrade, allowing the attacker to impersonate an authenticated user and access the SAM database. Microsoft has released a set of patches for Windows Vista, 2008, 7, 2008 R2, 2012, 8.1, RT 8.1, 2012 R2, and 10. https://technet.microsoft.com/library/security/MS16-047 http://badlock.org/
21369 H28-MOJ-Teikyo-Nara-17-seg-4-20161128-w510.csv 16639 90510 CVE-2016-0128 6.8 Medium 172.30.201.62 tcp 49154 MS16-047: Security Update for SAM and LSAD Remote Protocols (3148527) (Badlock) (uncredentialed check) The remote Windows host is affected by an elevation of privilege vulnerability. The remote Windows host is affected by an elevation of privilege vulnerability in the Security Account Manager (SAM) and Local Security Authority (Domain Policy) (LSAD) protocols due to improper authentication level negotiation over Remote Procedure Call (RPC) channels. A man-in-the-middle attacker able to intercept communications between a client and a server hosting a SAM database can exploit this to force the authentication level to downgrade, allowing the attacker to impersonate an authenticated user and access the SAM database. Microsoft has released a set of patches for Windows Vista, 2008, 7, 2008 R2, 2012, 8.1, RT 8.1, 2012 R2, and 10. https://technet.microsoft.com/library/security/MS16-047 http://badlock.org/
21572 H28-MOJ-Teikyo-Nara-17-seg-4-20161128-w510.csv 16639 90510 CVE-2016-0128 6.8 Medium 172.30.201.71 tcp 49154 MS16-047: Security Update for SAM and LSAD Remote Protocols (3148527) (Badlock) (uncredentialed check) The remote Windows host is affected by an elevation of privilege vulnerability. The remote Windows host is affected by an elevation of privilege vulnerability in the Security Account Manager (SAM) and Local Security Authority (Domain Policy) (LSAD) protocols due to improper authentication level negotiation over Remote Procedure Call (RPC) channels. A man-in-the-middle attacker able to intercept communications between a client and a server hosting a SAM database can exploit this to force the authentication level to downgrade, allowing the attacker to impersonate an authenticated user and access the SAM database. Microsoft has released a set of patches for Windows Vista, 2008, 7, 2008 R2, 2012, 8.1, RT 8.1, 2012 R2, and 10. https://technet.microsoft.com/library/security/MS16-047 http://badlock.org/
25976 H28-MOJ-Online-Funa-7-Seg-1-161103.csv 16639 90510 CVE-2016-0128 6.8 Medium 172.27.4.45 tcp 49154 MS16-047: Security Update for SAM and LSAD Remote Protocols (3148527) (Badlock) (uncredentialed check) The remote Windows host is affected by an elevation of privilege vulnerability. The remote Windows host is affected by an elevation of privilege vulnerability in the Security Account Manager (SAM) and Local Security Authority (Domain Policy) (LSAD) protocols due to improper authentication level negotiation over Remote Procedure Call (RPC) channels. A man-in-the-middle attacker able to intercept communications between a client and a server hosting a SAM database can exploit this to force the authentication level to downgrade, allowing the attacker to impersonate an authenticated user and access the SAM database. Microsoft has released a set of patches for Windows Vista, 2008, 7, 2008 R2, 2012, 8.1, RT 8.1, 2012 R2, and 10. https://technet.microsoft.com/library/security/MS16-047 http://badlock.org/
26191 H28-MOJ-Online-Funa-7-Seg-1-161103.csv 16639 90510 CVE-2016-0128 6.8 Medium 172.27.4.48 tcp 49154 MS16-047: Security Update for SAM and LSAD Remote Protocols (3148527) (Badlock) (uncredentialed check) The remote Windows host is affected by an elevation of privilege vulnerability. The remote Windows host is affected by an elevation of privilege vulnerability in the Security Account Manager (SAM) and Local Security Authority (Domain Policy) (LSAD) protocols due to improper authentication level negotiation over Remote Procedure Call (RPC) channels. A man-in-the-middle attacker able to intercept communications between a client and a server hosting a SAM database can exploit this to force the authentication level to downgrade, allowing the attacker to impersonate an authenticated user and access the SAM database. Microsoft has released a set of patches for Windows Vista, 2008, 7, 2008 R2, 2012, 8.1, RT 8.1, 2012 R2, and 10. https://technet.microsoft.com/library/security/MS16-047 http://badlock.org/
26403 H28-MOJ-Online-Funa-7-Seg-1-161103.csv 16639 90510 CVE-2016-0128 6.8 Medium 172.27.4.57 tcp 49154 MS16-047: Security Update for SAM and LSAD Remote Protocols (3148527) (Badlock) (uncredentialed check) The remote Windows host is affected by an elevation of privilege vulnerability. The remote Windows host is affected by an elevation of privilege vulnerability in the Security Account Manager (SAM) and Local Security Authority (Domain Policy) (LSAD) protocols due to improper authentication level negotiation over Remote Procedure Call (RPC) channels. A man-in-the-middle attacker able to intercept communications between a client and a server hosting a SAM database can exploit this to force the authentication level to downgrade, allowing the attacker to impersonate an authenticated user and access the SAM database. Microsoft has released a set of patches for Windows Vista, 2008, 7, 2008 R2, 2012, 8.1, RT 8.1, 2012 R2, and 10. https://technet.microsoft.com/library/security/MS16-047 http://badlock.org/
27277 H28-MOJ-Online-Funa-7-Seg-2-161103.csv 16639 90510 CVE-2016-0128 6.8 Medium 172.27.4.46 tcp 49154 MS16-047: Security Update for SAM and LSAD Remote Protocols (3148527) (Badlock) (uncredentialed check) The remote Windows host is affected by an elevation of privilege vulnerability. The remote Windows host is affected by an elevation of privilege vulnerability in the Security Account Manager (SAM) and Local Security Authority (Domain Policy) (LSAD) protocols due to improper authentication level negotiation over Remote Procedure Call (RPC) channels. A man-in-the-middle attacker able to intercept communications between a client and a server hosting a SAM database can exploit this to force the authentication level to downgrade, allowing the attacker to impersonate an authenticated user and access the SAM database. Microsoft has released a set of patches for Windows Vista, 2008, 7, 2008 R2, 2012, 8.1, RT 8.1, 2012 R2, and 10. https://technet.microsoft.com/library/security/MS16-047 http://badlock.org/
27492 H28-MOJ-Online-Funa-7-Seg-2-161103.csv 16639 90510 CVE-2016-0128 6.8 Medium 172.27.4.47 tcp 49154 MS16-047: Security Update for SAM and LSAD Remote Protocols (3148527) (Badlock) (uncredentialed check) The remote Windows host is affected by an elevation of privilege vulnerability. The remote Windows host is affected by an elevation of privilege vulnerability in the Security Account Manager (SAM) and Local Security Authority (Domain Policy) (LSAD) protocols due to improper authentication level negotiation over Remote Procedure Call (RPC) channels. A man-in-the-middle attacker able to intercept communications between a client and a server hosting a SAM database can exploit this to force the authentication level to downgrade, allowing the attacker to impersonate an authenticated user and access the SAM database. Microsoft has released a set of patches for Windows Vista, 2008, 7, 2008 R2, 2012, 8.1, RT 8.1, 2012 R2, and 10. https://technet.microsoft.com/library/security/MS16-047 http://badlock.org/
27704 H28-MOJ-Online-Funa-7-Seg-2-161103.csv 16639 90510 CVE-2016-0128 6.8 Medium 172.27.4.58 tcp 49154 MS16-047: Security Update for SAM and LSAD Remote Protocols (3148527) (Badlock) (uncredentialed check) The remote Windows host is affected by an elevation of privilege vulnerability. The remote Windows host is affected by an elevation of privilege vulnerability in the Security Account Manager (SAM) and Local Security Authority (Domain Policy) (LSAD) protocols due to improper authentication level negotiation over Remote Procedure Call (RPC) channels. A man-in-the-middle attacker able to intercept communications between a client and a server hosting a SAM database can exploit this to force the authentication level to downgrade, allowing the attacker to impersonate an authenticated user and access the SAM database. Microsoft has released a set of patches for Windows Vista, 2008, 7, 2008 R2, 2012, 8.1, RT 8.1, 2012 R2, and 10. https://technet.microsoft.com/library/security/MS16-047 http://badlock.org/
29028 H28-MOJ-Online-Funa-9-Seg-1-161103.csv 16639 90510 CVE-2016-0128 6.8 Medium 172.27.6.53 tcp 49154 MS16-047: Security Update for SAM and LSAD Remote Protocols (3148527) (Badlock) (uncredentialed check) The remote Windows host is affected by an elevation of privilege vulnerability. The remote Windows host is affected by an elevation of privilege vulnerability in the Security Account Manager (SAM) and Local Security Authority (Domain Policy) (LSAD) protocols due to improper authentication level negotiation over Remote Procedure Call (RPC) channels. A man-in-the-middle attacker able to intercept communications between a client and a server hosting a SAM database can exploit this to force the authentication level to downgrade, allowing the attacker to impersonate an authenticated user and access the SAM database. Microsoft has released a set of patches for Windows Vista, 2008, 7, 2008 R2, 2012, 8.1, RT 8.1, 2012 R2, and 10. https://technet.microsoft.com/library/security/MS16-047 http://badlock.org/
29185 H28-MOJ-Online-Funa-9-Seg-1-161103.csv 16639 90510 CVE-2016-0128 6.8 Medium 172.27.6.55 tcp 49154 MS16-047: Security Update for SAM and LSAD Remote Protocols (3148527) (Badlock) (uncredentialed check) The remote Windows host is affected by an elevation of privilege vulnerability. The remote Windows host is affected by an elevation of privilege vulnerability in the Security Account Manager (SAM) and Local Security Authority (Domain Policy) (LSAD) protocols due to improper authentication level negotiation over Remote Procedure Call (RPC) channels. A man-in-the-middle attacker able to intercept communications between a client and a server hosting a SAM database can exploit this to force the authentication level to downgrade, allowing the attacker to impersonate an authenticated user and access the SAM database. Microsoft has released a set of patches for Windows Vista, 2008, 7, 2008 R2, 2012, 8.1, RT 8.1, 2012 R2, and 10. https://technet.microsoft.com/library/security/MS16-047 http://badlock.org/
29377 H28-MOJ-Online-Funa-9-Seg-2-161103.csv 16639 90510 CVE-2016-0128 6.8 Medium 172.27.6.54 tcp 49154 MS16-047: Security Update for SAM and LSAD Remote Protocols (3148527) (Badlock) (uncredentialed check) The remote Windows host is affected by an elevation of privilege vulnerability. The remote Windows host is affected by an elevation of privilege vulnerability in the Security Account Manager (SAM) and Local Security Authority (Domain Policy) (LSAD) protocols due to improper authentication level negotiation over Remote Procedure Call (RPC) channels. A man-in-the-middle attacker able to intercept communications between a client and a server hosting a SAM database can exploit this to force the authentication level to downgrade, allowing the attacker to impersonate an authenticated user and access the SAM database. Microsoft has released a set of patches for Windows Vista, 2008, 7, 2008 R2, 2012, 8.1, RT 8.1, 2012 R2, and 10. https://technet.microsoft.com/library/security/MS16-047 http://badlock.org/
30063 H28-MOJ-Online-Funa-12-seg-v1-161103.csv 16639 90510 CVE-2016-0128 6.8 Medium 172.27.9.45 tcp 49154 MS16-047: Security Update for SAM and LSAD Remote Protocols (3148527) (Badlock) (uncredentialed check) The remote Windows host is affected by an elevation of privilege vulnerability. The remote Windows host is affected by an elevation of privilege vulnerability in the Security Account Manager (SAM) and Local Security Authority (Domain Policy) (LSAD) protocols due to improper authentication level negotiation over Remote Procedure Call (RPC) channels. A man-in-the-middle attacker able to intercept communications between a client and a server hosting a SAM database can exploit this to force the authentication level to downgrade, allowing the attacker to impersonate an authenticated user and access the SAM database. Microsoft has released a set of patches for Windows Vista, 2008, 7, 2008 R2, 2012, 8.1, RT 8.1, 2012 R2, and 10. https://technet.microsoft.com/library/security/MS16-047 http://badlock.org/
30187 H28-MOJ-Online-Funa-12-seg-v1-161103.csv 16639 90510 CVE-2016-0128 6.8 Medium 172.27.9.53 tcp 49154 MS16-047: Security Update for SAM and LSAD Remote Protocols (3148527) (Badlock) (uncredentialed check) The remote Windows host is affected by an elevation of privilege vulnerability. The remote Windows host is affected by an elevation of privilege vulnerability in the Security Account Manager (SAM) and Local Security Authority (Domain Policy) (LSAD) protocols due to improper authentication level negotiation over Remote Procedure Call (RPC) channels. A man-in-the-middle attacker able to intercept communications between a client and a server hosting a SAM database can exploit this to force the authentication level to downgrade, allowing the attacker to impersonate an authenticated user and access the SAM database. Microsoft has released a set of patches for Windows Vista, 2008, 7, 2008 R2, 2012, 8.1, RT 8.1, 2012 R2, and 10. https://technet.microsoft.com/library/security/MS16-047 http://badlock.org/
30336 H28-MOJ-Online-Funa-12-seg-v1-161103.csv 16639 90510 CVE-2016-0128 6.8 Medium 172.27.9.57 tcp 49154 MS16-047: Security Update for SAM and LSAD Remote Protocols (3148527) (Badlock) (uncredentialed check) The remote Windows host is affected by an elevation of privilege vulnerability. The remote Windows host is affected by an elevation of privilege vulnerability in the Security Account Manager (SAM) and Local Security Authority (Domain Policy) (LSAD) protocols due to improper authentication level negotiation over Remote Procedure Call (RPC) channels. A man-in-the-middle attacker able to intercept communications between a client and a server hosting a SAM database can exploit this to force the authentication level to downgrade, allowing the attacker to impersonate an authenticated user and access the SAM database. Microsoft has released a set of patches for Windows Vista, 2008, 7, 2008 R2, 2012, 8.1, RT 8.1, 2012 R2, and 10. https://technet.microsoft.com/library/security/MS16-047 http://badlock.org/
30832 H28-MOJ-Online-Funa-12-seg-v1-161103.csv 16639 90510 CVE-2016-0128 6.8 Medium 172.27.9.65 tcp 49154 MS16-047: Security Update for SAM and LSAD Remote Protocols (3148527) (Badlock) (uncredentialed check) The remote Windows host is affected by an elevation of privilege vulnerability. The remote Windows host is affected by an elevation of privilege vulnerability in the Security Account Manager (SAM) and Local Security Authority (Domain Policy) (LSAD) protocols due to improper authentication level negotiation over Remote Procedure Call (RPC) channels. A man-in-the-middle attacker able to intercept communications between a client and a server hosting a SAM database can exploit this to force the authentication level to downgrade, allowing the attacker to impersonate an authenticated user and access the SAM database. Microsoft has released a set of patches for Windows Vista, 2008, 7, 2008 R2, 2012, 8.1, RT 8.1, 2012 R2, and 10. https://technet.microsoft.com/library/security/MS16-047 http://badlock.org/
31004 H28-MOJ-Online-Funa-12-seg-v1-161103.csv 16639 90510 CVE-2016-0128 6.8 Medium 172.27.9.68 tcp 49154 MS16-047: Security Update for SAM and LSAD Remote Protocols (3148527) (Badlock) (uncredentialed check) The remote Windows host is affected by an elevation of privilege vulnerability. The remote Windows host is affected by an elevation of privilege vulnerability in the Security Account Manager (SAM) and Local Security Authority (Domain Policy) (LSAD) protocols due to improper authentication level negotiation over Remote Procedure Call (RPC) channels. A man-in-the-middle attacker able to intercept communications between a client and a server hosting a SAM database can exploit this to force the authentication level to downgrade, allowing the attacker to impersonate an authenticated user and access the SAM database. Microsoft has released a set of patches for Windows Vista, 2008, 7, 2008 R2, 2012, 8.1, RT 8.1, 2012 R2, and 10. https://technet.microsoft.com/library/security/MS16-047 http://badlock.org/
31214 H28-MOJ-Online-Funa-12-seg-v1-161103.csv 16639 90510 CVE-2016-0128 6.8 Medium 172.27.9.69 tcp 49154 MS16-047: Security Update for SAM and LSAD Remote Protocols (3148527) (Badlock) (uncredentialed check) The remote Windows host is affected by an elevation of privilege vulnerability. The remote Windows host is affected by an elevation of privilege vulnerability in the Security Account Manager (SAM) and Local Security Authority (Domain Policy) (LSAD) protocols due to improper authentication level negotiation over Remote Procedure Call (RPC) channels. A man-in-the-middle attacker able to intercept communications between a client and a server hosting a SAM database can exploit this to force the authentication level to downgrade, allowing the attacker to impersonate an authenticated user and access the SAM database. Microsoft has released a set of patches for Windows Vista, 2008, 7, 2008 R2, 2012, 8.1, RT 8.1, 2012 R2, and 10. https://technet.microsoft.com/library/security/MS16-047 http://badlock.org/
31367 H28-MOJ-Online-Funa-12-seg-v1-161103.csv 16639 90510 CVE-2016-0128 6.8 Medium 172.27.9.70 tcp 49154 MS16-047: Security Update for SAM and LSAD Remote Protocols (3148527) (Badlock) (uncredentialed check) The remote Windows host is affected by an elevation of privilege vulnerability. The remote Windows host is affected by an elevation of privilege vulnerability in the Security Account Manager (SAM) and Local Security Authority (Domain Policy) (LSAD) protocols due to improper authentication level negotiation over Remote Procedure Call (RPC) channels. A man-in-the-middle attacker able to intercept communications between a client and a server hosting a SAM database can exploit this to force the authentication level to downgrade, allowing the attacker to impersonate an authenticated user and access the SAM database. Microsoft has released a set of patches for Windows Vista, 2008, 7, 2008 R2, 2012, 8.1, RT 8.1, 2012 R2, and 10. https://technet.microsoft.com/library/security/MS16-047 http://badlock.org/
32477 H28-MOJ-Online-Funa-12-seg-v2-161103.csv 16639 90510 CVE-2016-0128 6.8 Medium 172.27.9.46 tcp 49154 MS16-047: Security Update for SAM and LSAD Remote Protocols (3148527) (Badlock) (uncredentialed check) The remote Windows host is affected by an elevation of privilege vulnerability. The remote Windows host is affected by an elevation of privilege vulnerability in the Security Account Manager (SAM) and Local Security Authority (Domain Policy) (LSAD) protocols due to improper authentication level negotiation over Remote Procedure Call (RPC) channels. A man-in-the-middle attacker able to intercept communications between a client and a server hosting a SAM database can exploit this to force the authentication level to downgrade, allowing the attacker to impersonate an authenticated user and access the SAM database. Microsoft has released a set of patches for Windows Vista, 2008, 7, 2008 R2, 2012, 8.1, RT 8.1, 2012 R2, and 10. https://technet.microsoft.com/library/security/MS16-047 http://badlock.org/
32601 H28-MOJ-Online-Funa-12-seg-v2-161103.csv 16639 90510 CVE-2016-0128 6.8 Medium 172.27.9.54 tcp 49154 MS16-047: Security Update for SAM and LSAD Remote Protocols (3148527) (Badlock) (uncredentialed check) The remote Windows host is affected by an elevation of privilege vulnerability. The remote Windows host is affected by an elevation of privilege vulnerability in the Security Account Manager (SAM) and Local Security Authority (Domain Policy) (LSAD) protocols due to improper authentication level negotiation over Remote Procedure Call (RPC) channels. A man-in-the-middle attacker able to intercept communications between a client and a server hosting a SAM database can exploit this to force the authentication level to downgrade, allowing the attacker to impersonate an authenticated user and access the SAM database. Microsoft has released a set of patches for Windows Vista, 2008, 7, 2008 R2, 2012, 8.1, RT 8.1, 2012 R2, and 10. https://technet.microsoft.com/library/security/MS16-047 http://badlock.org/
32749 H28-MOJ-Online-Funa-12-seg-v2-161103.csv 16639 90510 CVE-2016-0128 6.8 Medium 172.27.9.58 tcp 49154 MS16-047: Security Update for SAM and LSAD Remote Protocols (3148527) (Badlock) (uncredentialed check) The remote Windows host is affected by an elevation of privilege vulnerability. The remote Windows host is affected by an elevation of privilege vulnerability in the Security Account Manager (SAM) and Local Security Authority (Domain Policy) (LSAD) protocols due to improper authentication level negotiation over Remote Procedure Call (RPC) channels. A man-in-the-middle attacker able to intercept communications between a client and a server hosting a SAM database can exploit this to force the authentication level to downgrade, allowing the attacker to impersonate an authenticated user and access the SAM database. Microsoft has released a set of patches for Windows Vista, 2008, 7, 2008 R2, 2012, 8.1, RT 8.1, 2012 R2, and 10. https://technet.microsoft.com/library/security/MS16-047 http://badlock.org/
33561 H28-MOJ-Online-Funa-12-seg-v3-161103.csv 16639 90510 CVE-2016-0128 6.8 Medium 172.27.9.47 tcp 49154 MS16-047: Security Update for SAM and LSAD Remote Protocols (3148527) (Badlock) (uncredentialed check) The remote Windows host is affected by an elevation of privilege vulnerability. The remote Windows host is affected by an elevation of privilege vulnerability in the Security Account Manager (SAM) and Local Security Authority (Domain Policy) (LSAD) protocols due to improper authentication level negotiation over Remote Procedure Call (RPC) channels. A man-in-the-middle attacker able to intercept communications between a client and a server hosting a SAM database can exploit this to force the authentication level to downgrade, allowing the attacker to impersonate an authenticated user and access the SAM database. Microsoft has released a set of patches for Windows Vista, 2008, 7, 2008 R2, 2012, 8.1, RT 8.1, 2012 R2, and 10. https://technet.microsoft.com/library/security/MS16-047 http://badlock.org/
33709 H28-MOJ-Online-Funa-12-seg-v3-161103.csv 16639 90510 CVE-2016-0128 6.8 Medium 172.27.9.48 tcp 49154 MS16-047: Security Update for SAM and LSAD Remote Protocols (3148527) (Badlock) (uncredentialed check) The remote Windows host is affected by an elevation of privilege vulnerability. The remote Windows host is affected by an elevation of privilege vulnerability in the Security Account Manager (SAM) and Local Security Authority (Domain Policy) (LSAD) protocols due to improper authentication level negotiation over Remote Procedure Call (RPC) channels. A man-in-the-middle attacker able to intercept communications between a client and a server hosting a SAM database can exploit this to force the authentication level to downgrade, allowing the attacker to impersonate an authenticated user and access the SAM database. Microsoft has released a set of patches for Windows Vista, 2008, 7, 2008 R2, 2012, 8.1, RT 8.1, 2012 R2, and 10. https://technet.microsoft.com/library/security/MS16-047 http://badlock.org/
33833 H28-MOJ-Online-Funa-12-seg-v3-161103.csv 16639 90510 CVE-2016-0128 6.8 Medium 172.27.9.55 tcp 49154 MS16-047: Security Update for SAM and LSAD Remote Protocols (3148527) (Badlock) (uncredentialed check) The remote Windows host is affected by an elevation of privilege vulnerability. The remote Windows host is affected by an elevation of privilege vulnerability in the Security Account Manager (SAM) and Local Security Authority (Domain Policy) (LSAD) protocols due to improper authentication level negotiation over Remote Procedure Call (RPC) channels. A man-in-the-middle attacker able to intercept communications between a client and a server hosting a SAM database can exploit this to force the authentication level to downgrade, allowing the attacker to impersonate an authenticated user and access the SAM database. Microsoft has released a set of patches for Windows Vista, 2008, 7, 2008 R2, 2012, 8.1, RT 8.1, 2012 R2, and 10. https://technet.microsoft.com/library/security/MS16-047 http://badlock.org/
41060 H28-MOJ-Teikyo-Yokohama-16-seg-01-21161121-abe_4l6tzo.csv 16639 90510 CVE-2016-0128 6.8 Medium 172.30.135.62 tcp 49154 MS16-047: Security Update for SAM and LSAD Remote Protocols (3148527) (Badlock) (uncredentialed check) The remote Windows host is affected by an elevation of privilege vulnerability. The remote Windows host is affected by an elevation of privilege vulnerability in the Security Account Manager (SAM) and Local Security Authority (Domain Policy) (LSAD) protocols due to improper authentication level negotiation over Remote Procedure Call (RPC) channels. A man-in-the-middle attacker able to intercept communications between a client and a server hosting a SAM database can exploit this to force the authentication level to downgrade, allowing the attacker to impersonate an authenticated user and access the SAM database. Microsoft has released a set of patches for Windows Vista, 2008, 7, 2008 R2, 2012, 8.1, RT 8.1, 2012 R2, and 10. https://technet.microsoft.com/library/security/MS16-047 http://badlock.org/
42950 H28-MOJ-Teikyo-Yokohama-18-seg-01-21161121-abe_ubh1mj.csv 16639 90510 CVE-2016-0128 6.8 Medium 172.30.138.62 tcp 49154 MS16-047: Security Update for SAM and LSAD Remote Protocols (3148527) (Badlock) (uncredentialed check) The remote Windows host is affected by an elevation of privilege vulnerability. The remote Windows host is affected by an elevation of privilege vulnerability in the Security Account Manager (SAM) and Local Security Authority (Domain Policy) (LSAD) protocols due to improper authentication level negotiation over Remote Procedure Call (RPC) channels. A man-in-the-middle attacker able to intercept communications between a client and a server hosting a SAM database can exploit this to force the authentication level to downgrade, allowing the attacker to impersonate an authenticated user and access the SAM database. Microsoft has released a set of patches for Windows Vista, 2008, 7, 2008 R2, 2012, 8.1, RT 8.1, 2012 R2, and 10. https://technet.microsoft.com/library/security/MS16-047 http://badlock.org/
43113 H28-MOJ-Teikyo-Yokohama-18-seg-01-21161121-abe_ubh1mj.csv 16639 90510 CVE-2016-0128 6.8 Medium 172.30.138.63 tcp 49154 MS16-047: Security Update for SAM and LSAD Remote Protocols (3148527) (Badlock) (uncredentialed check) The remote Windows host is affected by an elevation of privilege vulnerability. The remote Windows host is affected by an elevation of privilege vulnerability in the Security Account Manager (SAM) and Local Security Authority (Domain Policy) (LSAD) protocols due to improper authentication level negotiation over Remote Procedure Call (RPC) channels. A man-in-the-middle attacker able to intercept communications between a client and a server hosting a SAM database can exploit this to force the authentication level to downgrade, allowing the attacker to impersonate an authenticated user and access the SAM database. Microsoft has released a set of patches for Windows Vista, 2008, 7, 2008 R2, 2012, 8.1, RT 8.1, 2012 R2, and 10. https://technet.microsoft.com/library/security/MS16-047 http://badlock.org/
43373 H28-MOJ-Teikyo-Yokohama-18-seg-01-21161121-abe_ubh1mj.csv 16639 90510 CVE-2016-0128 6.8 Medium 172.30.138.65 tcp 49154 MS16-047: Security Update for SAM and LSAD Remote Protocols (3148527) (Badlock) (uncredentialed check) The remote Windows host is affected by an elevation of privilege vulnerability. The remote Windows host is affected by an elevation of privilege vulnerability in the Security Account Manager (SAM) and Local Security Authority (Domain Policy) (LSAD) protocols due to improper authentication level negotiation over Remote Procedure Call (RPC) channels. A man-in-the-middle attacker able to intercept communications between a client and a server hosting a SAM database can exploit this to force the authentication level to downgrade, allowing the attacker to impersonate an authenticated user and access the SAM database. Microsoft has released a set of patches for Windows Vista, 2008, 7, 2008 R2, 2012, 8.1, RT 8.1, 2012 R2, and 10. https://technet.microsoft.com/library/security/MS16-047 http://badlock.org/
43910 H28-MOJ-Teikyo-Yokohama-18-seg-01-21161121-abe_ubh1mj.csv 16639 90510 CVE-2016-0128 6.8 Medium 172.30.138.69 tcp 49154 MS16-047: Security Update for SAM and LSAD Remote Protocols (3148527) (Badlock) (uncredentialed check) The remote Windows host is affected by an elevation of privilege vulnerability. The remote Windows host is affected by an elevation of privilege vulnerability in the Security Account Manager (SAM) and Local Security Authority (Domain Policy) (LSAD) protocols due to improper authentication level negotiation over Remote Procedure Call (RPC) channels. A man-in-the-middle attacker able to intercept communications between a client and a server hosting a SAM database can exploit this to force the authentication level to downgrade, allowing the attacker to impersonate an authenticated user and access the SAM database. Microsoft has released a set of patches for Windows Vista, 2008, 7, 2008 R2, 2012, 8.1, RT 8.1, 2012 R2, and 10. https://technet.microsoft.com/library/security/MS16-047 http://badlock.org/
44051 H28-MOJ-Teikyo-Yokohama-18-seg-01-21161121-abe_ubh1mj.csv 16639 90510 CVE-2016-0128 6.8 Medium 172.30.138.70 tcp 49154 MS16-047: Security Update for SAM and LSAD Remote Protocols (3148527) (Badlock) (uncredentialed check) The remote Windows host is affected by an elevation of privilege vulnerability. The remote Windows host is affected by an elevation of privilege vulnerability in the Security Account Manager (SAM) and Local Security Authority (Domain Policy) (LSAD) protocols due to improper authentication level negotiation over Remote Procedure Call (RPC) channels. A man-in-the-middle attacker able to intercept communications between a client and a server hosting a SAM database can exploit this to force the authentication level to downgrade, allowing the attacker to impersonate an authenticated user and access the SAM database. Microsoft has released a set of patches for Windows Vista, 2008, 7, 2008 R2, 2012, 8.1, RT 8.1, 2012 R2, and 10. https://technet.microsoft.com/library/security/MS16-047 http://badlock.org/
44255 H28-MOJ-Teikyo-Yokohama-18-seg-01-21161121-abe_ubh1mj.csv 16639 90510 CVE-2016-0128 6.8 Medium 172.30.138.71 tcp 49154 MS16-047: Security Update for SAM and LSAD Remote Protocols (3148527) (Badlock) (uncredentialed check) The remote Windows host is affected by an elevation of privilege vulnerability. The remote Windows host is affected by an elevation of privilege vulnerability in the Security Account Manager (SAM) and Local Security Authority (Domain Policy) (LSAD) protocols due to improper authentication level negotiation over Remote Procedure Call (RPC) channels. A man-in-the-middle attacker able to intercept communications between a client and a server hosting a SAM database can exploit this to force the authentication level to downgrade, allowing the attacker to impersonate an authenticated user and access the SAM database. Microsoft has released a set of patches for Windows Vista, 2008, 7, 2008 R2, 2012, 8.1, RT 8.1, 2012 R2, and 10. https://technet.microsoft.com/library/security/MS16-047 http://badlock.org/
45721 H28-MOJ-Teikyo-Yokohama-18-seg-02-21161121-abe_vilnov.csv 16639 90510 CVE-2016-0128 6.8 Medium 172.30.138.64 tcp 49154 MS16-047: Security Update for SAM and LSAD Remote Protocols (3148527) (Badlock) (uncredentialed check) The remote Windows host is affected by an elevation of privilege vulnerability. The remote Windows host is affected by an elevation of privilege vulnerability in the Security Account Manager (SAM) and Local Security Authority (Domain Policy) (LSAD) protocols due to improper authentication level negotiation over Remote Procedure Call (RPC) channels. A man-in-the-middle attacker able to intercept communications between a client and a server hosting a SAM database can exploit this to force the authentication level to downgrade, allowing the attacker to impersonate an authenticated user and access the SAM database. Microsoft has released a set of patches for Windows Vista, 2008, 7, 2008 R2, 2012, 8.1, RT 8.1, 2012 R2, and 10. https://technet.microsoft.com/library/security/MS16-047 http://badlock.org/
48317 H28-MOJ-Teikyo-Makuhari-3-Seg-1-161124-w510.csv 16639 90510 CVE-2016-0128 6.8 Medium 172.30.161.62 tcp 49154 MS16-047: Security Update for SAM and LSAD Remote Protocols (3148527) (Badlock) (uncredentialed check) The remote Windows host is affected by an elevation of privilege vulnerability. The remote Windows host is affected by an elevation of privilege vulnerability in the Security Account Manager (SAM) and Local Security Authority (Domain Policy) (LSAD) protocols due to improper authentication level negotiation over Remote Procedure Call (RPC) channels. A man-in-the-middle attacker able to intercept communications between a client and a server hosting a SAM database can exploit this to force the authentication level to downgrade, allowing the attacker to impersonate an authenticated user and access the SAM database. Microsoft has released a set of patches for Windows Vista, 2008, 7, 2008 R2, 2012, 8.1, RT 8.1, 2012 R2, and 10. https://technet.microsoft.com/library/security/MS16-047 http://badlock.org/
48772 H28-MOJ-Teikyo-Makuhari-4-Seg-1-161124-w510.csv 16639 90510 CVE-2016-0128 6.8 Medium 172.30.162.62 tcp 49154 MS16-047: Security Update for SAM and LSAD Remote Protocols (3148527) (Badlock) (uncredentialed check) The remote Windows host is affected by an elevation of privilege vulnerability. The remote Windows host is affected by an elevation of privilege vulnerability in the Security Account Manager (SAM) and Local Security Authority (Domain Policy) (LSAD) protocols due to improper authentication level negotiation over Remote Procedure Call (RPC) channels. A man-in-the-middle attacker able to intercept communications between a client and a server hosting a SAM database can exploit this to force the authentication level to downgrade, allowing the attacker to impersonate an authenticated user and access the SAM database. Microsoft has released a set of patches for Windows Vista, 2008, 7, 2008 R2, 2012, 8.1, RT 8.1, 2012 R2, and 10. https://technet.microsoft.com/library/security/MS16-047 http://badlock.org/
49190 H28-MOJ-Teikyo-Shinkawa-3-Seg-1-161122-w510.csv 16639 90510 CVE-2016-0128 6.8 Medium 172.30.151.62 tcp 49154 MS16-047: Security Update for SAM and LSAD Remote Protocols (3148527) (Badlock) (uncredentialed check) The remote Windows host is affected by an elevation of privilege vulnerability. The remote Windows host is affected by an elevation of privilege vulnerability in the Security Account Manager (SAM) and Local Security Authority (Domain Policy) (LSAD) protocols due to improper authentication level negotiation over Remote Procedure Call (RPC) channels. A man-in-the-middle attacker able to intercept communications between a client and a server hosting a SAM database can exploit this to force the authentication level to downgrade, allowing the attacker to impersonate an authenticated user and access the SAM database. Microsoft has released a set of patches for Windows Vista, 2008, 7, 2008 R2, 2012, 8.1, RT 8.1, 2012 R2, and 10. https://technet.microsoft.com/library/security/MS16-047 http://badlock.org/
49663 H28-MOJ-Teikyo-Shinkawa-4-Seg-1-161122-w510.csv 16639 90510 CVE-2016-0128 6.8 Medium 172.30.152.62 tcp 49154 MS16-047: Security Update for SAM and LSAD Remote Protocols (3148527) (Badlock) (uncredentialed check) The remote Windows host is affected by an elevation of privilege vulnerability. The remote Windows host is affected by an elevation of privilege vulnerability in the Security Account Manager (SAM) and Local Security Authority (Domain Policy) (LSAD) protocols due to improper authentication level negotiation over Remote Procedure Call (RPC) channels. A man-in-the-middle attacker able to intercept communications between a client and a server hosting a SAM database can exploit this to force the authentication level to downgrade, allowing the attacker to impersonate an authenticated user and access the SAM database. Microsoft has released a set of patches for Windows Vista, 2008, 7, 2008 R2, 2012, 8.1, RT 8.1, 2012 R2, and 10. https://technet.microsoft.com/library/security/MS16-047 http://badlock.org/