175 matches found
SUSE SLED12 / SLES12 Security Update : samba (SUSE-SU-2016:3272-1)
This update for samba fixes the following issues: Security issues fixed : - CVE-2016-2125: Don't send delegated credentials to all servers. bsc1014441. - CVE-2016-2126: Denial of service due to a client triggered crash in the winbindd parent process. bsc1014442. - CVE-2016-2123: Heap-based Buffer...
[ASA-201612-19] samba: multiple issues
Arch Linux Security Advisory ASA-201612-19 ========================================== Severity: Critical Date : 2016-12-22 CVE-ID : CVE-2016-2123 CVE-2016-2125 CVE-2016-2126 Package : samba Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-111 Summary ======= The packa...
Debian DSA-3740-1 : samba - security update
Several vulnerabilities have been discovered in Samba, a SMB/CIFS file, print, and login server for Unix. The Common Vulnerabilities and Exposures project identifies the following issues : - CVE-2016-2119 Stefan Metzmacher discovered that client-side SMB2/3 required signing can be downgraded,...
Ubuntu: Security Advisory (USN-3158-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 14.04 LTS / 16.04 LTS : Samba vulnerabilities (USN-3158-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3158-1 advisory. Frederic Besler and others discovered that the ndrpulldnspnam function in Samba contained an integer overflow. An authenticated attacker coul...
[SECURITY] [DSA 3740-1] samba security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3740-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 19, 2016 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3740-1] samba security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3740-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 19, 2016 https://www.debian.org/security/faq -...
Security fix for the ALT Linux 8 package samba version 4.5.3-alt1
Dec. 19, 2016 Evgeny Sinelnikov 4.5.3-alt1 - Update for release with security fixes: - CVE-2016-2123 ndrpulldnspname contains an integer wrap problem - CVE-2016-2125 client code always requests a forwardable ticket - CVE-2016-2126 crash winbindd using a legitimate Kerberos ticket...
Security fix for the ALT Linux 10 package samba version 4.5.3-alt1.S1
Dec. 19, 2016 Evgeny Sinelnikov 4.5.3-alt1.S1 - Update for release with security fixes: - CVE-2016-2123 ndrpulldnspname contains an integer wrap problem - CVE-2016-2125 client code always requests a forwardable ticket - CVE-2016-2126 crash winbindd using a legitimate Kerberos ticket...
Security fix for the ALT Linux 7 package samba-DC version 4.5.3-alt1.M70P.1
Dec. 19, 2016 Evgeny Sinelnikov 4.5.3-alt1.M70P.1 - Update for release with security fixes: - CVE-2016-2123 ndrpulldnspname contains an integer wrap problem - CVE-2016-2125 client code always requests a forwardable ticket - CVE-2016-2126 crash winbindd using a legitimate Kerberos ticket...
Security fix for the ALT Linux 7 package samba version 4.5.3-alt1.M70P.1
Dec. 19, 2016 Evgeny Sinelnikov 4.5.3-alt1.M70P.1 - Update for release with security fixes: - CVE-2016-2123 ndrpulldnspname contains an integer wrap problem - CVE-2016-2125 client code always requests a forwardable ticket - CVE-2016-2126 crash winbindd using a legitimate Kerberos ticket...
DSA-3740-1 samba - security update
Bulletin has no description...
Security fix for the ALT Linux 8 package samba-DC version 4.5.3-alt1
Dec. 19, 2016 Evgeny Sinelnikov 4.5.3-alt1 - Update for release with security fixes: - CVE-2016-2123 ndrpulldnspname contains an integer wrap problem - CVE-2016-2125 client code always requests a forwardable ticket - CVE-2016-2126 crash winbindd using a legitimate Kerberos ticket...
Debian Security Advisory DSA 3740-1 (samba - security update)
Several vulnerabilities have been discovered in Samba, a SMB/CIFS file, print, and login server for Unix. The Common Vulnerabilities and Exposures project identifies the following issues: CVE-2016-2119 Stefan Metzmacher discovered that client-side SMB2/3 required signing can be downgraded, allowi...
Debian: Security Advisory (DSA-3740-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Oracle: Security Advisory (ELSA-2013-1441)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
HP WebInspect XXE Unauthorized Information Disclosure
The version of HP WebInspect installed on the remote Windows host is affected by an unauthorized information disclosure vulnerability due to an XML external entity injection flaw that is triggered during the parsing of XML data. A remote attacker can exploit this, via a malicious website scanned ...
HP WebInspect 10.4 XML External Entity
Exploit Title: HP WebInspect - XML External Entity Date: 23\04\2015 Exploit Author: Jakub Palaczynski Vendor Homepage: http://www.hp.com/ Version: 10.4, 10.3, 10.2, 10.1, 10.0, 9.x, 8.x, 7.x CVE : CVE-2015-2125 1. Create website that exploits vulnerability. 1.1. Website that steals files using OO...
HP WebInspect 10.4 - XML External Entity Injection
HP WebInspect 10.4 - XML External Entity Injection Exploit Title: HP WebInspect - XML External Entity Date: 23\04\2015 Exploit Author: Jakub Palaczynski Vendor Homepage: http://www.hp.com/ Version: 10.4, 10.3, 10.2, 10.1, 10.0, 9.x, 8.x, 7.x CVE : CVE-2015-2125 1. Create website that exploits...
HP WebInspect 10.4 - XML External Entity Injection
Exploit Title: HP WebInspect - XML External Entity Date: 23\04\2015 Exploit Author: Jakub Palaczynski Vendor Homepage: http://www.hp.com/ Version: 10.4, 10.3, 10.2, 10.1, 10.0, 9.x, 8.x, 7.x CVE : CVE-2015-2125 1. Create website that exploits vulnerability. 1.1. Website that steals files using OO...