CentOS 4 / 5 : samba (CESA-2011:1219)

Updated samba packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings,...

Moderate: Red Hat Security Advisory: samba and cifs-utils security and bug fix update

Updated samba and cifs-utils packages that fix multiple security issues and one bug are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give...

Moderate: Red Hat Security Advisory: samba3x security update

Updated samba3x packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

samba and cifs-utils security and bug fix update

cifs-utils: 4.8.1-2.2 - fix handling of checknewline return code in mount.cifs bz 725508 4.8.1-2.1 - mount.cifs: handle ENOSPC/EFBIG condition when altering mtab bz 725508 samba: 3.5.6-86.4 - Fix cleartext authentication after applying Windows security patch KB2536276 - resolves: 728517 3.5.6-86....

samba security update

3.0.33-3.29.el5.4 - Security Release, Add fix also for CVE-2011-2724 - related: 722552 3.0.33-3.29.el5.3 - Security Release, fixes CVE-2010-0547, CVE-2010-0787, CVE-2011-2694, CVE-2011-2522, CVE-2011-1678 - resolves: 722552...

samba3x security update

3.5.4-0.83.2 - Security Release, add fix for CVE-2011-2724 - related: 722555 3.5.4-0.83.1 - Security Release, fixes CVE-2011-2694, CVE-2011-2522, CVE-2011-1678 - resolves: 722555...

Fedora Update for samba FEDORA-2011-10367

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for samba FEDORA-2011-10341

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora 15 : samba-3.5.11-71.fc15.1 (2011-10341)

Windows security patch KB2536276 prevents access to samba shares Security update to 3.5.10, fixes CVE-2011-2522 and CVE-2011-2694 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically cle...

Debian DSA-2290-1 : samba - XSS

The Samba Web Administration Tool SWAT contains several cross-site request forgery CSRF vulnerabilities CVE-2011-2522 and a cross-site scripting vulnerability CVE-2011-2694 . %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...

[SECURITY] [DSA 2290-1] samba security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2290-1 [email protected] http://www.debian.org/security/ Florian Weimer August 07, 2011 http://www.debian.org/security/faq -...

DSA-2290-1 samba - cross-side scripting

Bulletin has no description...

CVE-2011-2522

Multiple cross-site request forgery CSRF vulnerabilities in the Samba Web Administration Tool SWAT in Samba 3.x before 3.5.10 allow remote attackers to hijack the authentication of administrators for requests that 1 shut down daemons, 2 start daemons, 3 add shares, 4 remove shares, 5 add printers...

Mandriva Linux Security Advisory : samba (MDVSA-2011:121)

Multiple vulnerabilities has been discovered and corrected in samba : All current released versions of Samba are vulnerable to a cross-site request forgery in the Samba Web Administration Tool SWAT. By tricking a user who is authenticated with SWAT into clicking a manipulated URL on a different w...

SWAT Samba Web Administration Tool Cross-Site Request Forgery PoC

Exploit for cgi platform in category web applications Thanks & Regards, Narendra. Confidentiality: This e-mail and any attachments may be confidential and may also be privileged. If you are not an intended named recipient, please notify the sender immediately and do not disclose the contents to...

CVE-2011-2522

creationtimestamp| type| source ---|---|--- 2011-07-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/17577...

openSUSE Security Update : mipv6d (openSUSE-SU-2010:0736-1)

the mipv6 daemon did not check the origin of netlink messages, therefore allowing local users to spoof messages CVE-2010-2522. remote attackers could cause buffer overflows in mipv6d CVE-2010-2523. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in thi...

openSUSE Security Update : mipv6d (openSUSE-SU-2010:0736-1)

the mipv6 daemon did not check the origin of netlink messages, therefore allowing local users to spoof messages CVE-2010-2522. remote attackers could cause buffer overflows in mipv6d CVE-2010-2523. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in thi...

Fedora Update for mipv6-daemon FEDORA-2010-11143

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora 13 : mipv6-daemon-0.4-5.fc13 (2010-11152)

This update fixes two security problems in mipv6-daemon: I CVE-2010-2522: The origin of netlink messages sent to mipv6-daemon was not verified, allowing for local users to spoof netlink messages and thus influence the behaviour of mipv6-daemon. II CVE-2010-2523: A specially crafted...