Microsoft Windows XP SP3内核创建线程本地权限提升漏洞（MS10-047）

BUGTRAQ ID: 42211 CVE ID: CVE-2010-1888 Microsoft Windows是微软发布的非常流行的操作系统。 Windows内核在创建特定类型的线程时存在竞争条件错误，本地用户可以通过运行恶意应用程序获得内核级权限提升。成功利用这个漏洞的攻击者可以执行任意内核态代码。攻击者可随后安装程序；查看、更改或删除数据；或者创建拥有完全用户权限的新帐户。 Microsoft Windows XP SP3 厂商补丁： Microsoft --------- Microsoft已经为此发布了一个安全公告（MS10-047）以及相应补丁:...

CVE-2010-1888

CVE-2010-1888 is a Windows kernel privilege-escalation vulnerability described as a race condition in NtCreateThread during thread initialization, which could allow a local user to gain higher privileges on affected Windows versions (notably Windows XP SP3). The issue centers on how the CONTEXT-r...

VMSA-2010-0006 : ESX Service Console updates for samba and acpid

a. Service Console update for samba to 3.0.33-3.15.el54.1 This update changes the samba packages to samba-client-3.0.33-3.15.el54.1 and samba-common-3.0.33-3.15.el54.1. These versions include fixes for security issues that were first fixed in samba-client-3.0.33-0.18.el48 and...

CentOS Security Advisory CESA-2009:1529 (samba)

The remote host is missing updates to samba announced in advisory CESA-2009:1529. CESA-2009:1529 66161 4 $Id: ovcesa20091529.nasl 6650 2017-07-10 11:43:12Z cfischer $ Description: Auto-generated from advisory CESA-2009:1529 samba Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

RedHat Security Advisory RHSA-2009:1529

The remote host is missing updates announced in advisory RHSA-2009:1529. Samba is a suite of programs used by machines to share files, printers, and other information. A denial of service flaw was found in the Samba smbd daemon. An authenticated, remote user could send a specially-crafted respons...

CentOS Security Advisory CESA-2009:1529 (samba)

The remote host is missing updates to samba announced in advisory CESA-2009:1529. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-onl...

samba security update

3.0.33-3.15.el5 - Security Release, fixes CVE-2009-1888, CVE-2009-2813, CVE-2009-2948 and CVE-2009-2906 - resolves: 526660...

SLES10: Security update for Samba

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: cifs-mount libmsrpc libmsrpc-devel libsmbclient libsmbclient-devel samba samba-client samba-krb-printing samba-python samba-vscan samba-winbind More details...

SLES11: Security update for Samba

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: cifs-mount ldapsmb libsmbclient0 libtalloc1 libtdb1 libwbclient0 samba samba-client samba-krb-printing samba-winbind More details may also be found by...

Ubuntu: Security Advisory (USN-839-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SuSE 10 Security Update : Samba (ZYPP Patch Number 6343)

Fixed a format string vulnerability in smbclient CVE-2009-1886 and a ACL bypass vulnerability in samba. CVE-2009-1888 Also a printing issue in KRB5 setups was fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

Debian Security Advisory DSA 1823-1 (samba)

The remote host is missing an update to samba announced via advisory DSA 1823-1. OpenVAS Vulnerability Test $Id: deb18231.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1823-1 samba Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Slackware 10.0 / 10.1 / 10.2 / 11.0 / 12.0 / 12.1 / 12.2 / current : samba (SSA:2009-177-01)

New samba packages are available for Slackware 10.0, 10.1, 10.2, 11.0, 12.0, 12.1, 12.2, and -current to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2009-177-01. Th...

samba

New samba packages are available for Slackware 10.0, 10.1, 10.2, 11.0, 12.0, 12.1, 12.2, and -current to fix security issues. More details about the issues may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2009-1888...

[SECURITY] [DSA 1823-1] New samba packages fix several vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1823-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst June 25, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1823-1] New samba packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1823-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst June 25, 2009 http://www.debian.org/security/faq -...

CVE-2009-1888

The aclgroupoverride function in smbd/posixacls.c in smbd in Samba 3.0.x before 3.0.35, 3.1.x and 3.2.x before 3.2.13, and 3.3.x before 3.3.6, when dos filemode is enabled, allows remote attackers to modify access control lists for files via vectors related to read access to uninitialized memory...

DSA-1823-1 samba - several vulnerabilities

Bulletin has no description...

CVE-2009-1888

The CVE-2009-1888 issue affects Samba’s acl_group_override in smbd/posix_acls.c when dos filemode is enabled, allowing remote modification of file ACLs. Affected ranges: Samba 3.0.x before 3.0.35; 3.1.x before 3.1.x (unspecified point); 3.2.x before 3.2.13; 3.3.x before 3.3.6. Mirroring patches i...

CVE-2008-1888

Cross-site scripting XSS vulnerability in Microsoft Windows SharePoint Services 2.0 allows remote attackers to inject arbitrary web script or HTML via the Picture Source aka picture object source field in the Rich Text Editor...