DSA-1908-1 samba - several vulnerabilities

Bulletin has no description...

Samba错误配置/etc/passwd文件绕过安全限制漏洞

BUGTRAQ ID: 36363 CVE ID: CVE-2009-2813 Samba是一套实现SMB（Server Messages Block）协议、跨平台进行文件共享和打印共享服务的程序。 如果/etc/passwd中的用户错误的配置为拥有空的主目录（::）且启用了自动homes共享，或用该用户名创建了明确的共享，则任何连接到该共享名的客户端都可以访问root（/）之下的整个文件系统。 Samba Samba 3.4 Samba Samba 3.3 Samba Samba 3.2 Samba Samba 3.0 临时解决方法：...

Fedora Core 11 FEDORA-2009-10180 (samba)

The remote host is missing an update to samba announced via advisory FEDORA-2009-10180. OpenVAS Vulnerability Test $Id: fcore200910180.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-10180 samba Authors: Thomas Reinke Copyright: Copyright c 2009...

Fedora Core 11 FEDORA-2009-10180 (samba)

The remote host is missing an update to samba announced via advisory FEDORA-2009-10180. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Ubuntu: Security Advisory (USN-839-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Core 10 FEDORA-2009-10172 (samba)

The remote host is missing an update to samba announced via advisory FEDORA-2009-10172. OpenVAS Vulnerability Test $Id: fcore200910172.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-10172 samba Authors: Thomas Reinke Copyright: Copyright c 2009...

Fedora Core 10 FEDORA-2009-10172 (samba)

The remote host is missing an update to samba announced via advisory FEDORA-2009-10172. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Fedora 10 : samba-3.2.15-0.36.fc10 (2009-10172)

Security Release, fixes CVE-2009-2813, CVE-2009-2948 and CVE-2009-2906 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora 11 : samba-3.4.2-0.42.fc11 (2009-10180)

Security Release, fixes CVE-2009-2813, CVE-2009-2948 and CVE-2009-2906 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

samba

New samba packages are available for Slackware 10.0, 10.1, 10.2, 11.0, 12.0, 12.1, 12.2, 13.0, and -current to fix security issues. More details about the issues may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2009-2813...

Samba < 3.0.37 / 3.2.15 / 3.3.8 / 3.4.2 Multiple Vulnerabilities

According to its banner, the version of Samba server on the remote host is earlier than 3.0.37 / 3.2.15 / 3.3.8 / 3.4.2. Such versions are potentially affected by multiple issues : - If a user in '/etc/passwd' is misconfigured to have an empty home directory, then connecting to the home share of...

Security fix for the ALT Linux 6 package samba version 3.0.37-alt1

Oct. 1, 2009 Alexander Bokovoy 3.0.37-alt1 - Security fixes: + CVE-2009-2813 + CVE-2009-2906 + CVE-2009-2948...

CVE-2009-2813

CVE-2009-2813 affects Samba where SMB path resolution errors allow remote authenticated users to bypass sharing restrictions and read/create/modify files, specifically in versions: 3.0.12–3.0.36, 3.2.x before 3.2.15, 3.3.x before 3.3.8, and 3.4.x before 3.4.2, when used in the SMB subsystem of OS...

Mac OS X Multiple Vulnerabilities (Security Update 2009-005)

The remote host is running a version of Mac OS X 10.5 or 10.4 that does not have Security Update 2009-005 applied. This security update contains fixes for the following products : - Alias Manager - CarbonCore - ClamAV - ColorSync - CoreGraphics - CUPS - Flash Player plug-in - ImageIO - Launch...

CVE-2008-2813

Directory traversal vulnerability in index.php in WallCity-Server Shoutcast Admin Panel 2.0, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the page parameter...

CVE-2008-2813

Directory traversal vulnerability in index.php in WallCity-Server Shoutcast Admin Panel 2.0, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the page parameter...

CVE-2008-2813

The vulnerability CVE-2008-2813 affects the WallCity-Server Shoutcast Admin Panel 2.0. In index.php, a directory traversal flaw exists when magic_quotes_gpc is disabled, allowing an attacker to include and execute arbitrary local files by injecting a .. (dot dot) into the page parameter. This is ...

CVE-2007-2813

CVE-2007-2813 affects Cisco IOS 12.4 and earlier with SSL enabled and crypto packages. The vulnerability permits remote denial of service by sending malformed SSL handshake messages (ClientHello, ChangeCipherSpec, or Finished) during an SSL session, causing the device to crash. Root cause: improp...

CVE-2006-2813

CVE-2006-2813 describes a directory traversal vulnerability in the product component easy-scart.cgi of iShopCart . An attacker can exploit a .. (dot dot) sequence in the query string to read arbitrary files. The NVD entry lists a high risk (CVSS v2 base score 7.8) with network access and low comp...

CVE-2005-2813

CVE-2005-2813 concerns FlatNuke 2.5.6 (and possibly earlier) with a directory traversal in index.php reading via the id parameter (read mod), allowing an attacker to read arbitrary files using .. and %00. The connected Nessus/NVD entries confirm the vulnerability path and document that affected s...