197 matches found
Samba < 3.0.25 Multiple Vulnerabilities
According to its banner, the version of the Samba server installed on the remote host is affected by multiple buffer overflow and remote command injection vulnerabilities, which can be exploited remotely, as well as a local privilege escalation bug. C Tenable Network Security, Inc...
samba security update
CentOS Errata and Security Advisory CESA-2007:0354-01 Updated samba packages that fix several security flaws are now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. Samba provides file and printer sharing services to SMB/CIFS clients...
Immunity Canvas: SOLARIS_SAMBA
Name| solarissamba ---|--- CVE| CVE-2007-2446 Exploit Pack| CANVAS Description| SAMBA apilsalookupsids Notes| CVE Name: CVE-2007-2446 VENDOR: Sun and Samba Platforms Tested: Solaris 9 with default SAMBA 2.2.8a, Solaris 8 with sunfreeware SAMBA 3.0.10 Date public: 5/15/2007 CVE Url:...
CVE-2007-2446
Multiple heap-based buffer overflows in the NDR parsing in smbd in Samba 3.0.0 through 3.0.25rc3 allow remote attackers to execute arbitrary code via crafted MS-RPC requests involving 1 DFSEnum netdfsiodfsEnumInfod, 2 RFNPCNEX smbionotifyoptiontypedata, 3 LsarAddPrivilegesToAccount...
CVE-2007-2446
Multiple heap-based buffer overflows in the NDR parsing in smbd in Samba 3.0.0 through 3.0.25rc3 allow remote attackers to execute arbitrary code via crafted MS-RPC requests involving 1 DFSEnum netdfsiodfsEnumInfod, 2 RFNPCNEX smbionotifyoptiontypedata, 3 LsarAddPrivilegesToAccount...
CVE-2007-2446
CVE-2007-2446 is a remote code execution vulnerability in Samba, caused by heap-based buffer overflows in the NDR parsing of the SMB/CIFS NetDFS/LSA RPC interfaces. Affected are Samba 3.0.0 through 3.0.25rc3. The flaw is triggered by crafted MS-RPC requests and affects multiple RPC operations, in...
Immunity Canvas: ASUS_SAMBA
Name| asussamba ---|--- CVE| CVE-2007-2446 Exploit Pack| CANVAS Description| SAMBA apilsalookupsids Notes| CVE Name: CVE-2007-2446 VENDOR: Samba Platforms Tested: ASUS EEE with SAMBA 3.24 Date public: 5/15/2007 CVE Url: https://vulners.com/cve/CVE-2007-2446 CVSS: 10.0...
Samba 3.0.21 3.0.24 - LSA trans names Heap Overflow (Metasploit)
Samba 3.0.21 3.0.24 - LSA trans names Heap Overflow Metasploit $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
Critical: samba security update
3.0.10-1.4E.12.2 - Security fixes for CVE-2007-2446 CVE-2007-2447...
[SECURITY] [DSA 1184-2] New Linux 2.6.8 packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 1184-2 [email protected] http://www.debian.org/security/ Dann Frazier September 26th, 2006 http://www.debian.org/security/faq -...
[SECURITY] [DSA 1183-1] New Linux 2.4.27 packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 1183-1 [email protected] http://www.debian.org/security/ Dann Frazier September 25th, 2006 http://www.debian.org/security/faq -...
CVE-2006-2446
Race condition between the kfreeskb and skbunlink functions in the socket buffer handling in Linux kernel 2.6.9, and possibly other versions, allows remote attackers to cause a denial of service crash, as demonstrated using the TCP stress tests from the LTP test suite...
CVE-2006-2446
CVE-2006-2446 describes a race condition between kfree_skb and __skb_unlink in Linux kernel socket buffer handling (Linux kernel 2.6.9 and possibly others) that can allow remote attackers to cause a denial of service (crash) as demonstrated by TCP stress tests in the LTP suite. Connected document...
CVE-2006-2446
Race condition between the kfreeskb and skbunlink functions in the socket buffer handling in Linux kernel 2.6.9, and possibly other versions, allows remote attackers to cause a denial of service crash, as demonstrated using the TCP stress tests from the LTP test suite...
CVE-2004-2446
CVE-2004-2446 describes a directory traversal vulnerability in 1st Class Mail Server 4.01, enabling remote attackers to read arbitrary files via dot-dot sequences. The initial records indicate the affected product and impact (read access to files) but do not provide exploit vectors, affected vers...
