USN-2257-1: Samba vulnerabilities

Christof Schmitt discovered that Samba incorrectly initialized a certain response field when vfs shadow copy was enabled. A remote authenticated attacker could use this issue to possibly obtain sensitive information. This issue only affected Ubuntu 13.10 and Ubuntu 14.04 LTS. CVE-2014-0178 It was...

[slackware-security] samba

New samba packages are available for Slackware 14.0, 14.1, and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/samba-4.1.9-i486-1slack14.1.txz: Upgraded. This update fixes bugs and security issues, including a flaw in Samba's internal DNS...

Samba 3.6.x < 3.6.24 / 4.0.x < 4.0.19 / 4.1.x < 4.1.9 Multiple Vulnerabilities

According to its banner, the version of Samba on the remote host is 3.6.x prior to 3.6.24, 4.0.x prior to 4.0.19, or 4.1.x prior to 4.1.9. It is, therefore, affected by the following vulnerabilities : - A denial of service flaw exists with 'nmbd'. A remote attacker, with a specially crafted packe...

Security fix for the ALT Linux 8 package samba version 4.1.9-alt1

June 24, 2014 Alexey Shabalin 4.1.9-alt1 - 4.1.9 - fixed nmbd denial of serviceCVE-2014-0244 - fixed Segmentation fault in smbdmarshalldirentryCVE-2014-3493...

CVE-2014-3493

CVE-2014-3493 affects Samba: push_ascii in smbd allows a remote authenticated user to trigger a memory corruption/denial of service by reading a Unicode pathname without enabling Unicode, causing an invalid pointer dereference. Affected are Samba 3.6.x before 3.6.24, 4.0.x before 4.0.19, and 4.1....

[SECURITY] [DSA 2966-1] samba security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2966-1 [email protected] http://www.debian.org/security/ Yves-Alexis Perez June 23, 2014 http://www.debian.org/security/faq -...

DSA-2966-1 samba - security update

Bulletin has no description...

Debian: Security Advisory (DSA-2966-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Update : libpython2_6-1_0 (openSUSE-SU-2010:1051-1)

a race condition in the accept implementation of smtpd.py could lead to a denial of service CVE-2010-3493 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libpython26-10-3488. The text...

GLSA-201401-04 : Python: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201401-04 Python: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Python. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could possibly cause a Denial of Servic...

XnView 2.x < 2.04 Multiple Buffer Overflow Vulnerabilities

The version of XnView installed on the remote Windows host is 2.x, earlier than 2.04. It is, therefore, reportedly affected by the following overflow vulnerabilities: - An unspecified error exists that could allow a buffer overflow during 'PCT' file handling. CVE-2013-2577 - Unspecified errors...

Oracle Linux 4 : python (ELSA-2011-0491)

From Red Hat Security Advisory 2011:0491 : Updated python packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores,...

Ubuntu: Security Advisory (USN-1613-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu Update for python2.5 USN-1613-1

Ubuntu Update for Linux kernel vulnerabilities USN-1613-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN16131.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for python2.5 USN-1613-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net Th...

Ubuntu: Security Advisory (USN-1596-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-1596-1: Python 2.6 vulnerabilities

It was discovered that Python would prepend an empty string to sys.path under certain circumstances. A local attacker with write access to the current working directory could exploit this to execute arbitrary code. CVE-2008-5983 It was discovered that the audioop module did not correctly perform...

CVE-2012-3493

CVE-2012-3493 affects Condor 7.6.x (before 7.6.10) and 7.8.x (before 7.8.4). A remote ClassAd request to condor_startd can leak the ClaimId, enabling possible information disclosure and, potentially, control or start of arbitrary jobs. Remediation: upgrade to 7.6.10/7.8.4 or later (per descriptio...

CVE-2012-3493

The commandgiverequestad function in condorstartd.V6/command.cpp Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 allows remote attackers to obtain sensitive information, and possibly control or start arbitrary jobs, via a ClassAd request to the condorstartd port, which leaks the ClaimId...

Scientific Linux Security Update : python on SL6.x i386/x86_64

Python is an interpreted, interactive, object-oriented programming language. A flaw was found in the Python urllib and urllib2 libraries where they would not differentiate between different target URLs when handling automatic redirects. This caused Python applications using these modules to follo...

CentOS Update for python CESA-2011:0491 centos4 x86_64

Check for the Version of python OpenVAS Vulnerability Test CentOS Update for python CESA-2011:0491 centos4 x8664 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...