oval:org.mitre.oval:def:6441

Definition Id: oval:org.mitre.oval:def:6441

Oval ID:	oval:org.mitre.oval:def:6441
Title:	Remote Code Execution in ADFS Vulnerability
Description:	Active Directory Federation Services (ADFS) in Microsoft Windows Server 2003 SP2 and Server 2008 Gold and SP2 does not properly validate headers in HTTP requests, which allows remote authenticated users to execute arbitrary code via a crafted request to an IIS web server, aka "Remote Code Execution in ADFS Vulnerability."
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2009-2509	Version:	5
Platform(s):	Microsoft Windows Server 2003 Microsoft Windows Server 2008	Product(s):
Definition Synopsis:
Windows Server 2003 x86/x64 SP2 IF Microsoft Windows Server 2003 SP2 (x64) is installed AND Microsoft Windows Server 2003 SP2 (x86) is installed AND the system is being used as: Member Server, BDC or PDC (DomainRole is 3, 4 or 5) AND the version of System.web.security.singlesignon.dll is less than 5.2.3790.4578 OR Windows Server 2008 32-bit/x64/ia64 SP1 GDR IF Microsoft Windows Server 2008 (32-bit) is installed AND Microsoft Windows Server 2008 (64-bit) is installed AND the system is being used as: Member Server, BDC or PDC (DomainRole is 3, 4 or 5) AND the version of System.web.security.singlesignon.dll is less than 6.0.6001.18311 AND the version of System.web.security.singlesignon.dll is greater than 6.0.6001.18000 OR Windows Server 2008 32-bit/x64/ia64 SP1 LDR IF Microsoft Windows Server 2008 (32-bit) is installed AND Microsoft Windows Server 2008 (64-bit) is installed AND the system is being used as: Member Server, BDC or PDC (DomainRole is 3, 4 or 5) AND the version of System.web.security.singlesignon.dll is less than 6.0.6001.22498 AND the version of System.web.security.singlesignon.dll is greater than 6.0.6001.22000 OR Windows Server 2008 32-bit/x64 SP2 GDR IF Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed AND Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed AND the system is being used as: Member Server, BDC or PDC (DomainRole is 3, 4 or 5) AND the version of System.web.security.singlesignon.dll is less than 6.0.6002.18091 AND the version of System.web.security.singlesignon.dll is greater than 6.0.6002.18000 OR Windows Server 2008 32-bit/x64 SP2 LDR IF Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed AND Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed AND the system is being used as: Member Server, BDC or PDC (DomainRole is 3, 4 or 5) AND the version of System.web.security.singlesignon.dll is less than 6.0.6002.22201 AND the version of System.web.security.singlesignon.dll is greater than 6.0.6002.22000

Definition Id: oval:org.mitre.oval:def:1935

Oval ID:	oval:org.mitre.oval:def:1935
Title:	Microsoft Windows Server 2003 SP2 (x86) is installed
Description:	A version of Microsoft Windows Server 2003 Service Pack 2 (x86) is installed.
Family:	windows	Class:	inventory
Reference(s):	cpe:/o:microsoft:windows_server_2003::sp2:x86	Version:	11
Platform(s):	Microsoft Windows Server 2003	Product(s):
Definition Synopsis:
the installed operating system is part of the Microsoft Windows family AND Windows Server 2003 is installed AND a version of Windows for the x86 architecture is installed AND Win2K/XP/2003/Vista/2008 service pack 2 is installed
Referenced By:
oval:org.mitre.oval:def:6441

Definition Id: oval:org.mitre.oval:def:2161

Oval ID:	oval:org.mitre.oval:def:2161
Title:	Microsoft Windows Server 2003 SP2 (x64) is installed
Description:	A version of Microsoft Windows Server 2003 SP2 (x64) is installed.
Family:	windows	Class:	inventory
Reference(s):	cpe:/o:microsoft:windows_2003_server::sp2:x64	Version:	13
Platform(s):	Microsoft Windows Server 2003	Product(s):
Definition Synopsis:
the installed operating system is part of the Microsoft Windows family AND Windows Server 2003 is installed AND a version of Windows for the x64 architecture is installed AND Win2K/XP/2003/Vista/2008 service pack 2 is installed
Referenced By:
oval:org.mitre.oval:def:6441

Definition Id: oval:org.mitre.oval:def:4870

Oval ID:	oval:org.mitre.oval:def:4870
Title:	Microsoft Windows Server 2008 (32-bit) is installed
Description:	The operating system installed on the system is Microsoft Windows Server 2008 (32-bit)
Family:	windows	Class:	inventory
Reference(s):	cpe:/o:microsoft:windows_server_2008:::x86	Version:	6
Platform(s):	Microsoft Windows Server 2008	Product(s):
Definition Synopsis:
the installed operating system is part of the Microsoft Windows family AND Windows Server 2008 is installed AND a version of Windows for the x86 architecture is installed AND NOT Windows Server 2008 R2 is installed
Referenced By:
oval:org.mitre.oval:def:6441 oval:org.mitre.oval:def:6441

Definition Id: oval:org.mitre.oval:def:5356

Oval ID:	oval:org.mitre.oval:def:5356
Title:	Microsoft Windows Server 2008 (64-bit) is installed
Description:	The operating system installed on the system is Microsoft Windows Server 2008 (64-bit)
Family:	windows	Class:	inventory
Reference(s):	cpe:/o:microsoft:windows_server_2008:::x64	Version:	8
Platform(s):	Microsoft Windows Server 2008	Product(s):
Definition Synopsis:
the installed operating system is part of the Microsoft Windows family AND Windows Server 2008 is installed AND a version of Windows for the x64 architecture is installed AND NOT Windows Server 2008 R2 is installed
Referenced By:
oval:org.mitre.oval:def:6441 oval:org.mitre.oval:def:6441

Definition Id: oval:org.mitre.oval:def:5653

Oval ID:	oval:org.mitre.oval:def:5653
Title:	Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed
Description:	The operating system installed on the system is Microsoft Windows Server 2008 (32-bit) Service Pack 2
Family:	windows	Class:	inventory
Reference(s):	cpe:/o:microsoft:windows_server_2008::sp2:x86	Version:	9
Platform(s):	Microsoft Windows Server 2008	Product(s):
Definition Synopsis:
the installed operating system is part of the Microsoft Windows family AND Windows Server 2008 is installed AND a version of Windows for the x86 architecture is installed AND Win2K/XP/2003/Vista/2008 service pack 2 is installed AND NOT Windows Server 2008 R2 is installed
Referenced By:
oval:org.mitre.oval:def:6441 oval:org.mitre.oval:def:6441

Definition Id: oval:org.mitre.oval:def:6216

Oval ID:	oval:org.mitre.oval:def:6216
Title:	Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed
Description:	The operating system installed on the system is Microsoft Windows Server 2008 x64 Edition Service Pack 2
Family:	windows	Class:	inventory
Reference(s):	cpe:/o:microsoft:windows_server_2008::sp2:x64	Version:	11
Platform(s):	Microsoft Windows Server 2008	Product(s):
Definition Synopsis:
the installed operating system is part of the Microsoft Windows family AND Windows Server 2008 is installed AND a version of Windows for the x64 architecture is installed AND Win2K/XP/2003/Vista/2008 service pack 2 is installed
Referenced By:
oval:org.mitre.oval:def:6441 oval:org.mitre.oval:def:6441

Copyright Security-Database 2006-2024 - Powered by themself ;) in 0.0524s

Facebook rss twitter linkedin mail