109 matches found
FreeBSD Ports: samba, ja-samba
The remote host is missing an update to the system as announced in the referenced advisory. VID 57ae52f7-b9cc-11db-bf0f-0013720b182d OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
FreeBSD Ports: samba, ja-samba
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
CVE-2008-0454
Cross-zone scripting vulnerability in the Internet Explorer web control in Skype 3.6.0.244, and earlier 3.5.x and 3.6.x versions, on Windows allows user-assisted remote attackers to inject arbitrary web script or HTML in the Local Machine Zone via the Title field of a 1 Dailymotion and possibly 2...
CVE-2008-0454
The CVE-2008-0454 entry concerns Skype on Windows where cross-zone scripting is possible through the Internet Explorer web control. Specifically, in Skype 3.6.0.244 (and earlier 3.5.x/3.6.x), a user-assisted attacker could inject arbitrary web script/HTML in the Local Machine Zone via the Title f...
Debian Security Advisory DSA 524-1 (rlpr)
The remote host is missing an update to rlpr announced via advisory DSA 524-1. OpenVAS Vulnerability Test $Id: deb5241.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 524-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
Debian Security Advisory DSA 1257-1 (samba)
The remote host is missing an update to samba announced via advisory DSA 1257-1. Several remote vulnerabilities have been discovered in samba, a free implementation of the SMB/CIFS protocol, which may lead to the execution of arbitrary code or denial of service. The Common Vulnerabilities and...
Debian: Security Advisory (DSA-1257-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 5.10 / 6.06 LTS / 6.10 : samba vulnerabilities (USN-419-1)
A flaw was discovered in Samba's file opening code, which in certain situations could lead to an endless loop, resulting in a denial of service. CVE-2007-0452 A format string overflow was discovered in Samba's ACL handling on AFS shares. Remote users with access to an AFS share could create craft...
Debian DSA-1257-1 : samba - several vulnerabilities
Several remote vulnerabilities have been discovered in samba, a free implementation of the SMB/CIFS protocol, which may lead to the execution of arbitrary code or denial of service. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-0452 It was...
[slackware-security] samba
New samba packages are available for Slackware 10.0, 10.1, 10.2, and 11.0 to fix a denial-of-service security issue. More details about the issues fixed in Samba 3.0.24 may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2007-0452...
CVE-2007-0454
CVE-2007-0454 describes a format-string vulnerability in the Samba 3.0.6 to 3.0.23d release range, specifically in the afsacl.so VFS module used for AFS file systems. The flaw arises from improper handling of format specifiers in filenames during Windows ACL mapping, enabling a context-dependent ...
[SAMBA-SECURITY] CVE-2007-0454: Format string bug in afsacl.so VFS plugin
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ========================================================== == == Subject: Format string bug in afsacl.so VFS plugin. == CVE ID: CVE-2007-0454 == == Versions: The AFS ACL mapping VFS plugin distributed == in Samba 3.0.6 - 3.0.23d inclusive == == Summar...
Fedora Core 4 : kernel-2.6.15-1.1831_FC4 (2006-102)
This update fixes a remotely exploitable denial of service attack in the icmp networking code CVE-2006-0454. An information leak has also been fixed CVE-2006-0095, and some debugging patches that had accidentally been left applied in the previous update have been removed, restoring the...
SUSE-SA:2006:006: kernel
The remote host is missing the patch for the advisory SUSE-SA:2006:006 kernel. The Linux kernel on SUSE Linux 10.0 has been updated to fix following security problems: - CVE-2006-0454: An extra dst release when ipoptionsecho failed was fixed. This problem could be triggered by remote attackers an...
CVE-2006-0454
The CVE-2006-0454 issue affects the Linux kernel (2.6.x) where icmp_send mishandles failures in ip_options_echo, enabling remote attackers to crash the host via crafted ICMP options (record-route, timestamp with needaddr and truncated value). Public advisories from SUSE, Red Hat, Fedora, Ubuntu d...
CVE-2005-0454
Vulnerability summary (CVE-2005-0454) : DCP-Port al 6.1.1 and earlier contain multiple SQL injection flaws that allow remote attackers to execute arbitrary SQL commands. The issues are triggered via (1) index.php parameters lcat, doc, or uid, and (2) forums.php parameters mid or bid. The connecte...
CVE-2004-0454
Buffer overflow in the msg function for rlpr daemon rlprd 2.04 allows local users to execute arbitrary code...
CVE-2004-0454
Buffer overflow in the msg function for rlpr daemon rlprd 2.04 allows local users to execute arbitrary code...
CVE-2004-0454
CVE-2004-0454 is a buffer overflow in the msg() function of the rlpr(rlprd) daemon (rlprd v2.04) that allows a local user to execute arbitrary code. Public references (NVD, Debian DSA-524, OSV, OpenVAS, etc.) corroborate a local-execution impact. Remediation per Debian DSA-524-1 is to update the ...