Fedora 12 : samba-3.4.9-60.fc12 (2010-14678)

Thu Sep 9 2010 Guenther Deschner - 3.4.9-60 - Security Release, fixes CVE-2010-3069 - resolves: 630869 - Wed May 12 2010 Guenther Deschner - 3.4.8-59 - Update to 3.4.8 - Make sure nmb and smb initscripts return LSB compliant return codes - resolves: 521095 - Mon Mar 8 2010 Simo Sorce - 3.4.7-58 -...

Fedora 11 : samba-3.4.7-0.50.fc11 (2010-4050)

CVE-2010-0728 http://www.samba.org/samba/security/CVE-2010-0728 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additiona...

Fedora 12 : samba-3.4.7-58.fc12 (2010-3999)

CVE-2010-0728 http://www.samba.org/samba/security/CVE-2010-0728 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additiona...

Fedora 13 : samba-3.5.1-58.fc13 (2010-4087)

CVE-2010-0728 http://www.samba.org/samba/security/CVE-2010-0728 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additiona...

Samba CAP_DAC_OVERRIDE文件权限绕过安全限制漏洞

BUGTRAQ ID: 38606 CVE ID: CVE-2010-0728 Samba是一套实现SMB（Server Messages Block）协议、跨平台进行文件共享和打印共享服务的程序。 如果启用了libcap支持，则所有的smbd进程都继承了CAPDACOVERRIDE功能标记，这允许通过认证的远程用户通过标准的文件系统操作绕过预期的文件权限限制读写访问文件。 Samba Samba 3.5.0 Samba Samba 3.4.6 Samba Samba 3.3.11 厂商补丁： Samba ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Samba 'CAP_DAC_OVERRIDE' File Permission Security Bypass (version check)

The remote Samba server is potentially affected by a security bypass vulnerability because of a flaw that causes all smbd processes, when libcap support is enabled, to inherit 'CAPDACOVERRIDE' capabilities, which in turn causes all file system access to be allowed even when permissions should hav...

Fedora Update for samba FEDORA-2010-3999

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2010-0728

CVE-2010-0728 concerns: in Samba, the smbd service runs with CAP_DAC_OVERRIDE when libcap support is enabled in Samba 3.3.11, 3.4.6, and 3.5.0, enabling remote authenticated users to bypass file permissions via standard filesystem operations. The connected documents confirm this exact root cause ...

Gentoo Security Advisory GLSA 200802-09 (clamav)

The remote host is missing updates announced in advisory GLSA 200802-09. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GLSA-200802-09 : ClamAV: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200802-09 ClamAV: Multiple vulnerabilities An integer overflow has been reported in the 'cliscanpe' function in file libclamav/pe.c CVE-2008-0318. Another unspecified vulnerability has been reported in file libclamav/mew.c...

ClamAV: Multiple vulnerabilities

Background Clam AntiVirus is a free anti-virus toolkit for UNIX, designed especially for e-mail scanning on mail gateways. Description An integer overflow has been reported in the "cliscanpe" function in file libclamav/pe.c CVE-2008-0318. Another unspecified vulnerability has been reported in fil...

openSUSE 10 Security Update : clamav (clamav-5009)

This version upgrade to 0.92.1 fixes numerous flaws including some security problems CVE-2008-0318, CVE-2008-0728. Please note that the version number of the clamav library has changed with version 0.92. Programs linked against older libclamav therefore need to be updated as well. %NASLMINLEVEL...

SuSE 10 Security Update : clamav (ZYPP Patch Number 5008)

This version upgrade to 0.92.1 fixes numerous flaws including some security problems. CVE-2008-0318 / CVE-2008-0728 Please note that the version number of the clamav library has changed in version 0.92. Programs linked against older libclamav therefore need to be updated as well. %NASLMINLEVEL...

CVE-2008-0728

The unmew11 function in libclamav/mew.c in libclamav in ClamAV before 0.92.1 has unknown impact and attack vectors that trigger "heap corruption."...

CVE-2008-0728

The unmew11 function in libclamav/mew.c in libclamav in ClamAV before 0.92.1 has unknown impact and attack vectors that trigger "heap corruption."...

CVE-2008-0728

The unmew11 function in libclamav/mew.c in libclamav in ClamAV before 0.92.1 has unknown impact and attack vectors that trigger "heap corruption."...

CVE-2008-0728

The unmew11 function in libclamav/mew.c in libclamav in ClamAV before 0.92.1 has unknown impact and attack vectors that trigger "heap corruption."...

CVE-2008-0728

CVE-2008-0728 affects ClamAV libclamav, specifically the unmew11 function in libclamav/mew.c, with vulnerability in libclamav prior to 0.92.1 that triggers heap corruption. The initial sources describe the impact as unknown and without explicit attack vectors. The referenced material indicates up...

Debian Security Advisory DSA 140-2 (libpng, libpng3)

The remote host is missing an update to libpng, libpng3 announced via advisory DSA 140-2. OpenVAS Vulnerability Test $Id: deb1402.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 140-2 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

CVE-2007-0728

CVE-2007-0728 affects Apple Mac OS X 10.3.9 and 10.4 up to 10.4.8. It describes an insecure file-creation flaw during USB printer initialization, allowing local users to create or overwrite arbitrary files. The available source summarizes impact as local access with partial confidentiality/integr...