157 matches found
CVE-2009-4138
CVE-2009-4138 affects Linux kernels with the FireWire OHCI driver (drivers/firewire/ohci.c) prior to 2.6.32-git9. In packet-per-buffer mode, a local user can trigger a NULL pointer dereference via an ioctl associated with receiving an ISO packet with a zero payload-length field, potentially leadi...
Solaris Update for Samba 119757-16
Check for the Version of Samba OpenVAS Vulnerability Test Solaris Update for Samba 119757-16 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of the...
Remote file inclusion
PHP remote file inclusion vulnerability in skinshop/standard/2viewbody/bodydefault.php in TECHNOTE 7.2, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the shopthisskinpath parameter, a different vector than CVE-2008-4138...
CVE-2009-0441
CVE-2009-0441 describes a PHP remote file inclusion in TECHNOTE 7.2’s skin_shop/standard/2_view_body/body_default.php. The vulnerability occurs when register_globals is enabled and allows an attacker to execute arbitrary PHP code by supplying a URL in the shop_this_skin_path parameter (a differen...
CVE-2008-4138
PHP remote file inclusion vulnerability in skinshop/standard/3plugintwindow/twindownotice.php in TECHNOTE 7 allows remote attackers to execute arbitrary PHP code via a URL in the shopthisskinpath parameter...
CVE-2008-4138
CVE-2008-4138 affects the PHP-based TECHNOTE 7 skin system (skin_shop/standard/3_plugin_twindow/twindow_notice.php). The root cause is a remote file inclusion flaw: the parameter shop_this_skin_path is used in a way that allows an attacker to supply a URL and execute arbitrary PHP code. This yiel...
RHEL 5 : samba (RHSA-2007:1017)
Updated samba packages that fix security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. Samba is a suite of programs used by machines to share files, printers, and other information. A...
CVE-2007-4138
The Winbind nssinfo extension nsswitch/idmapad.c in idmapad.so in Samba 3.0.25 through 3.0.25c, when the "winbind nss info" option is set to rfc2307 or sfu, grants all local users the privileges of gid 0 when the 1 RFC2307 or 2 Services for UNIX SFU primary group attribute is not defined...
CVE-2007-4138
CVE-2007-4138 affects Samba 3.0.25 through 3.0.25c. The Winbind nss_info extension (nsswitch/idmap_ad.c) can grant all local users the privileges of gid 0 when winbind nss info is set to RFC2307 or SFU and the primary group attribute is not defined. This is a local privilege escalation vulnerabil...
CVE-2007-4138
The Winbind nssinfo extension nsswitch/idmapad.c in idmapad.so in Samba 3.0.25 through 3.0.25c, when the "winbind nss info" option is set to rfc2307 or sfu, grants all local users the privileges of gid 0 when the 1 RFC2307 or 2 Services for UNIX SFU primary group attribute is not defined...
CVE-2007-4138
The Winbind nssinfo extension nsswitch/idmapad.c in idmapad.so in Samba 3.0.25 through 3.0.25c, when the "winbind nss info" option is set to rfc2307 or sfu, grants all local users the privileges of gid 0 when the 1 RFC2307 or 2 Services for UNIX SFU primary group attribute is not defined...
[slackware-security] samba
New samba packages are available for Slackware 10.0, 10.1, 10.2, 11.0, and 12.0 to fix a security issue and various other bugs. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2007-4138 Here are the details from the...
Samba NSS_Info插件本地权限提升漏洞
BUGTRAQ ID: 25636 CVECAN ID: CVE-2007-4138 Samba是一套实现SMB（Server Messages Block）协议、跨平台进行文件共享和打印共享服务的程序。 idmapad.so库中为Winbind提供了nssinfo扩展用于从活动目录域控制台检索用户的主目录路径、登录shell和主组id等，可通过将winbind nss info的smb.conf选项定义为sfu或rfc2307来启用这个功能。 Windows的Identity Management for Unix和Services for Unix...
Security fix for the ALT Linux 5 package samba version 3.0.26a-alt1
Sept. 11, 2007 Alexander Bokovoy 3.0.26a-alt1 - Bugfix release - Includes security fix for CVE-2007-4138...
CVE-2006-4138
CVE-2006-4138 affects the Microsoft Windows Help File viewer (winhlp32.exe). It involves multiple unspecified vulnerabilities that could allow user-assisted attackers to execute arbitrary code via crafted HLP files. The NVD entry lists a high impact with a base CVSS v2 score of 7.6 (AV:N/AC:H/Au:...
CVE-2005-4138
ThWboard vulnerable to multiple XSS flaws in versions before 3 Beta 2.84. Attack vectors include (1) Wohnort and (2) Beruf fields in editprofile.php, (3) user parameter array in v_profile.php, and (4) the action parameter in misc.php. These allow remote attackers to inject arbitrary web script/HT...
