CVE-2009-2948

mount.cifs in Samba 3.0 before 3.0.37, 3.2 before 3.2.15, 3.3 before 3.3.8 and 3.4 before 3.4.2, when mount.cifs is installed suid root, does not properly enforce permissions, which allows local users to read part of the credentials file and obtain the password by specifying the path to the...

Fedora Core 11 FEDORA-2009-10180 (samba)

The remote host is missing an update to samba announced via advisory FEDORA-2009-10180. OpenVAS Vulnerability Test $Id: fcore200910180.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-10180 samba Authors: Thomas Reinke Copyright: Copyright c 2009...

Ubuntu: Security Advisory (USN-839-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Core 11 FEDORA-2009-10180 (samba)

The remote host is missing an update to samba announced via advisory FEDORA-2009-10180. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Fedora Core 10 FEDORA-2009-10172 (samba)

The remote host is missing an update to samba announced via advisory FEDORA-2009-10172. OpenVAS Vulnerability Test $Id: fcore200910172.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-10172 samba Authors: Thomas Reinke Copyright: Copyright c 2009...

Fedora Core 10 FEDORA-2009-10172 (samba)

The remote host is missing an update to samba announced via advisory FEDORA-2009-10172. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Fedora 10 : samba-3.2.15-0.36.fc10 (2009-10172)

Security Release, fixes CVE-2009-2813, CVE-2009-2948 and CVE-2009-2906 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora 11 : samba-3.4.2-0.42.fc11 (2009-10180)

Security Release, fixes CVE-2009-2813, CVE-2009-2948 and CVE-2009-2906 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

samba

New samba packages are available for Slackware 10.0, 10.1, 10.2, 11.0, 12.0, 12.1, 12.2, 13.0, and -current to fix security issues. More details about the issues may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2009-2813...

Samba < 3.0.37 / 3.2.15 / 3.3.8 / 3.4.2 Multiple Vulnerabilities

According to its banner, the version of Samba server on the remote host is earlier than 3.0.37 / 3.2.15 / 3.3.8 / 3.4.2. Such versions are potentially affected by multiple issues : - If a user in '/etc/passwd' is misconfigured to have an empty home directory, then connecting to the home share of...

Security fix for the ALT Linux 6 package samba version 3.0.37-alt1

Oct. 1, 2009 Alexander Bokovoy 3.0.37-alt1 - Security fixes: + CVE-2009-2813 + CVE-2009-2906 + CVE-2009-2948...

CVE-2009-0396

The Sony Ericsson W910i, W660i, K618i, K610i, Z610i, K810i, K660i, W880i, and K530i phones allow remote attackers to cause a denial of service device reboot or hang-up via a malformed WAP Push packet to 1 SMS or 2 UDP port 2948...

Design/Logic Flaw

The Sony Ericsson W910i, W660i, K618i, K610i, Z610i, K810i, K660i, W880i, and K530i phones allow remote attackers to cause a denial of service device reboot or hang-up via a malformed WAP Push packet to 1 SMS or 2 UDP port 2948...

SonyEricsson mobile phones WAP DoS

Crash on SMS or UDP/2948 WAP PUSH message handling...

SonyEricsson WAP Push Denial of Service

Security Advisory MSL-2008-001 - SonyEricsson WAP Push Denial of Service Advisory Information -------------------- Title: SonyEricsson WAP Push Denial of Service Advisory ID: MSL-2008-001 Advisory URL: http://www.mseclab.com/index.php?pageid=123 Published: 2009-01-26 Updated: 2009-01-26 Vendor:...

Cross site scripting

Cross-domain vulnerability in Microsoft Internet Explorer 5.01 SP4, 6, and 7 allows remote attackers to access restricted information from other domains via JavaScript that uses the Object data type for the value of a 1 location or 2 location.href property, related to incorrect determination of t...

CVE-2008-2948

CVE-2008-2948 is documented as a cross-domain vulnerability in Internet Explorer, described as a duplicate/related attack to CVE-2008-2947. The connected sources indicate it affects IE, involves window location cross-domain handling via the Object data type, and is tied to the same family of vuln...

[SECURITY] [DSA 1313-1] New MPlayer packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1313-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff June 19th, 2007 http://www.debian.org/security/faq -...

CVE-2007-2948

Multiple stack-based buffer overflows in stream/streamcddb.c in MPlayer before 1.0rc1try3 allow remote attackers to execute arbitrary code via a CDDB entry with a long 1 album title or 2 category...

CVE-2007-2948

Summary: CVE-2007-2948 affects MPlayer; a vulnerability in stream_cddb.c allows remote attackers to trigger a stack-based buffer overflow via a CDDB entry with a long album title or category. Impact: remote code execution with the user’s privileges, over the network. Affected software/versions: M...