CVE-2007-4572

The CVE-2007-4572 issue is a stack-based buffer overflow in Samba's nmbd (3.0.0–3.0.26a) when Samba is configured as a Primary or Backup Domain Controller. It is triggered by crafted GETDC mailslot requests related to GETDC logon server handling, allowing remote attackers to impact the system (co...

CVE-2007-5398

The CVE-2007-5398 issue affects Samba 3.0.0–3.0.26a when configured as a WINS server. It is caused by a stack-based buffer overflow in the reply_netbios_packet function in nmbd/nmbd_packets.c, allowing remote attackers to execute arbitrary code by sending crafted WINS Name Registration requests f...

Unfixed XSS vulnerability at www.schwarz-auf-weiss.de

Security researcher Langy, has submitted on 16/11/2007 a cross-site-scripting XSS vulnerability affecting www.schwarz-auf-weiss.de, which at the time of submission ranked 203100 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/11/2007. It is...

[SAMBA] CVE-2007-4572 - GETDC mailslot processing buffer overrun in nmbd

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ========================================================== == == Subject: Stack buffer overflow in nmbd's logon == request processing. == == CVE ID: CVE-2007-4572 == == Versions: Samba 3.0.0 - 3.0.26a inclusive == == Summary: Processing of specially...

Unfixed XSS vulnerability at www.sternstunden-jena.de

Security researcher bate, has submitted on 16/11/2007 a cross-site-scripting XSS vulnerability affecting www.sternstunden-jena.de, which at the time of submission ranked 1862389 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/11/2007. It is...

US-CERT Technical Cyber Security Alert TA07-319A -- Apple Updates for Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 National Cyber Alert System Technical Cyber Security Alert TA07-319A Apple Updates for Multiple Vulnerabilities Original release date: November 15, 2007 Last revised: -- Source: US-CERT Systems Affected Apple Mac OS X version 10.3.x and 10.4.x Apple M...

Secunia Research: Samba "reply_netbios_packet()" Buffer Overflow Vulnerability

====================================================================== Secunia Research 15/11/2007 - Samba "replynetbiospacket" Buffer Overflow Vulnerability - ====================================================================== Table of Contents Affected...

CVE-2007-6011

The CVE-2007-6011 entry concerns BugHotel Reservation System (main.php) before version 4.9.9 P3, where an authentication bypass allows remote attackers to gain administrative access via unspecified vectors. The description notes the vulnerability details are unspecified and provenance is from thi...

Microsoft Jet Database Engine MDB File Parsing Remote Buffer Overflow Vulnerability

Microsoft Jet Database Engine MDB File Parsing Remote Buffer Overflow Vulnerability. CVE-2007-6026. Dos exploit for windows platform source: http://www.securityfocus.com/bid/26468/info Microsoft Jet Database Engine is prone to a buffer-overflow vulnerability because it fails to properly...

Critical: samba security update

3.0.9-1.3E.14 - Security fix for CVE-2007-4572 and CVE-2007-5398 resolves: 350731 resolves: 359101...

RHEL 4 : openldap (RHSA-2007:1038)

Updated openldap packages that fix a security flaw are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. OpenLDAP is an open source suite of LDAP Lightweight Directory Access Protocol applications and...

RHEL 4 : pam (RHSA-2007:0737)

Updated pam packages that fix two security flaws, resolve two bugs, and add an enhancement are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Pluggable Authentication Modules PAM provide a system...

RHEL 3 / 4 / 5 : net-snmp (RHSA-2007:1045)

Updated net-snmp packages that fix a security issue are now available for Red Hat Enterprise Linux 3, 4, and 5. Simple Network Management Protocol SNMP is a protocol used for network management. A flaw was discovered in the way net-snmp handled certain requests. A remote attacker who can connect ...

RHEL 2.1 / 3 : samba (RHSA-2007:1013)

Updated samba packages that fix several security issues are now available for Red Hat Enterprise Linux 2.1 and 3. This update has been rated as having critical security impact by the Red Hat Security Response Team. Samba is a suite of programs used by machines to share files, printers, and other...

RHEL 5 : samba (RHSA-2007:1017)

Updated samba packages that fix security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. Samba is a suite of programs used by machines to share files, printers, and other information. A...

RHEL 4 : xterm (RHSA-2007:0701)

An updated xterm package that corrects a security issue is now available for Red Hat Enterprise Linux 4. This update has been rated as having low security impact by the Red Hat Security Response Team. The xterm program is a terminal emulator for the X Window System. It provides DEC VT102 and...

Moderate: util-linux security update

2.11y-31.24 - fix 324431 - CVE-2007-5191 util-linux mount doesn't drop privileges properly when calling helpers...

RHEL 4 : openssl (RHSA-2007:1003)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2007:1003 advisory. OpenSSL is a toolkit that implements the Secure Sockets Layer SSL v2/v3 and Transport Layer Security TLS v1 protocols, and is also a...

RHEL 4 : wireshark (RHSA-2007:0709)

New Wireshark packages that fix various security vulnerabilities and functionality bugs are now available for Red Hat Enterprise Linux 4. Wireshark was previously known as Ethereal. This update has been rated as having low security impact by the Red Hat Security Response Team. Wireshark is a...

RHEL 4 : httpd (RHSA-2007:0747)

Updated httpd packages that fix a security issue, various bugs, and add enhancements are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Apache HTTP Server is a popular and freely-available Web...