Gentoo Security Advisory GLSA 200705-15 (samba)

The remote host is missing updates announced in advisory GLSA 200705-15. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

FreeBSD Ports: samba, ja-samba

The remote host is missing an update to the system as announced in the referenced advisory. VID 3546a833-03ea-11dc-a51d-0019b95d4f14 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: samba, ja-samba

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

SpamAssassin spamd Remote Command Execution

This module exploits a flaw in the SpamAssassin spamd service by specifying a malicious vpopmail User header, when running with vpopmail and paranoid modes enabled non-default. Versions prior to v3.1.3 are vulnerable This module requires Metasploit: https://metasploit.com/download Current source:...

CVE-2008-2447

The CVE-2008-2447 entry concerns the Mytipper ZoGo-shop plugin for e107 (versions 1.15.5 and 1.16 Beta 13). The vulnerability is a SQL injection in products.php triggered via the cat parameter, enabling remote attackers to execute arbitrary SQL commands. The linked records confirm the affected co...

CVE-2008-2447

creationtimestamp| type| source ---|---|--- 2008-05-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5605...

Debian: Security Advisory (DSA-1291-2)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1291-2 (samba)

The remote host is missing an update to samba announced via advisory DSA 1291-2. This VT has been deprecated and merged into the VT SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

SuSE 10 Security Update : Samba (ZYPP Patch Number 3351)

Specially crafted MS-RPC packets could overwrite heap memory and therfore could potentially be exploited to execute code. CVE-2007-2446 Authenticated users could leverage specially crafted MS-RPC packets to pass arguments unfiltered to /bin/sh. CVE-2007-2447 %NASLMINLEVEL 70300 C Tenable Network...

SuSE 10 Security Update : Samba (ZYPP Patch Number 3829)

The previous security fix for CVE-2007-2447 missed one character in the shell escape handling. Also fixed were some regressions introduced by the previous update. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

Ubuntu 6.06 LTS / 6.10 / 7.04 : samba vulnerabilities (USN-460-1)

Paul Griffith and Andrew Hogue discovered that Samba did not fully drop root privileges while translating SIDs. A remote authenticated user could issue SMB operations during a small window of opportunity and gain root privileges. CVE-2007-2444 Brian Schafer discovered that Samba did not handle ND...

openSUSE 10 Security Update : spamassassin (spamassassin-1904)

This update fixes the following security problem in SpamAssassin : - CVE-2006-2447: SpamAssassin when running with vpopmail and the paranoid -P switch, allows remote attackers to execute arbitrary commands via a crafted message that is not properly handled when invoking spamd with the virtual pop...

openSUSE 10 Security Update : samba (samba-3827)

The previous security fix for CVE-2007-2447 missed one character in the shell escape handling. Also fixed were some regressions introduced by the previous update. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSU...

openSUSE 10 Security Update : samba (samba-3828)

The previous security fix for CVE-2007-2447 missed one character in the shell escape handling. Also fixed were some regressions introduced by the previous update. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSU...

openSUSE 10 Security Update : samba (samba-3350)

Specially crafted MS-RPC packets could overwrite heap memory and therfore could potentially be exploited to execute code CVE-2007-2446. Authenticated users could leverage specially crafted MS-RPC packets to pass arguments unfiltered to /bin/sh CVE-2007-2447. A bug in the local SID/Name translatio...

Mac OS X Multiple Vulnerabilities (Security Update 2007-007)

The remote host is running a version of Mac OS X 10.4 or 10.3 which does not have the security update 2007-007 applied. This update contains several security fixes for the following programs : - bzip2 - CFNetwork - CoreAudio - cscope - gnuzip - iChat - Kerberos - mDNSResponder - PDFKit - PHP -...

Fedora Core 5 : spamassassin-3.1.9-1.fc5.1 (2007-584)

Local symlink vulnerability. Fedora is not vulnerable in any default or common configurations. Read upstream's announcement for details. http://spamassassin.apache.org/advisories/CVE-2007-2873.txt Note that Tenable Network Security has extracted the preceding description block directly from the...

[SECURITY] [DSA 1291-3] New samba packages fix regression

-------------------------------------------------------------------------- Debian Security Advisory DSA 1291-3 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff May 20th, 2007 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1291-2] New samba packages fix multiple vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1291-2 [email protected] http://www.debian.org/security/ Noah Meyerhans May 15, 2007 - ------------------------------------------------------------------------ Package : samba Vulnerability :...

Fedora Core 6 : samba-3.0.24-5.fc6 (2007-507)

This release of Samba fixes some Serious security bugs : - CVE-2007-2444 - CVE-2007-2446 - CVE-2007-2447 Official upstream announcements here: http://www.samba.org/samba/security/CVE-2007-2444.html http://www.samba.org/samba/security/CVE-2007-2446.html...