SuSE 11 Security Update : Samba (SAT Patch Number 1053)

Fixed a format string vulnerability in smbclient CVE-2009-1886 and a ACL bypass vulnerability in samba. CVE-2009-1888 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is...

Cisco防火墙服务模块ICMP消息拒绝服务漏洞

CVECAN ID: CVE-2009-0638 Cisco FWSM是Cisco设备上的防火墙服务模块。 Cisco FWSM软件中存在漏洞，如果处理了多个特制的ICMP消息，就会导致FWSM停止转发接口之间的通讯，或停止处理到达FWSM的通讯（管理通讯）。这是由于FWSM用于处理通讯的一个网络处理器（NP）在处理特定类型的ICMP消息时可能耗尽所有可用的执行线程，这种行为限制了可用于处理更多通讯的执行线程。 任何中间通讯或到达FWSM的通讯都受影响，无论是否启用了ICMP检查。 Cisco Firewall Services Module 4.x Cisco Firewall...

Mandrake Security Advisory MDVSA-2009:196 (samba)

The remote host is missing an update to samba announced via advisory MDVSA-2009:196. OpenVAS Vulnerability Test $Id: mdksa2009196.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:196 samba Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Mandriva Linux Security Advisory : samba (MDVSA-2009:196)

Multiple vulnerabilities has been found and corrected in samba : Multiple format string vulnerabilities in client/client.c in smbclient in Samba 3.2.0 through 3.2.12 might allow context-dependent attackers to execute arbitrary code via format string specifiers in a filename CVE-2009-1886. The...

Fedora Core 10 FEDORA-2009-7761 (moin)

The remote host is missing an update to moin announced via advisory FEDORA-2009-7761. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

openSUSE Security Update : cifs-mount (cifs-mount-1036)

Fixed a format string vulnerability in smbclient CVE-2009-1886 and a ACL bypass vulnerability in samba CVE-2009-1888. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update cifs-mount-1036. The text...

openSUSE Security Update : cifs-mount (cifs-mount-1036)

Fixed a format string vulnerability in smbclient CVE-2009-1886 and a ACL bypass vulnerability in samba CVE-2009-1888. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update cifs-mount-1036. The text...

GLSA-200906-05 : Wireshark: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200906-05 Wireshark: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Wireshark: David Maciejak discovered a vulnerability in packet-usb.c in the USB dissector via a malformed USB Request Block URB...

Debian DSA-1823-1 : samba - several vulnerabilities

Several vulnerabilities have been discovered in Samba, a SMB/CIFS file, print, and login server. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-1886 The smbclient utility contains a formatstring vulnerability where commands dealing with file names...

Samba Format String Vulnerability

Samba is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:samba:samba"; ifdescription...

Debian Security Advisory DSA 1823-1 (samba)

The remote host is missing an update to samba announced via advisory DSA 1823-1. OpenVAS Vulnerability Test $Id: deb18231.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1823-1 samba Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Wireshark: Multiple vulnerabilities

Background Wireshark is a versatile network protocol analyzer. Description Multiple vulnerabilities have been discovered in Wireshark: David Maciejak discovered a vulnerability in packet-usb.c in the USB dissector via a malformed USB Request Block URB CVE-2008-4680. Florent Drouin and David...

[SECURITY] [DSA 1823-1] New samba packages fix several vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1823-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst June 25, 2009 http://www.debian.org/security/faq -...

CVE-2009-1888

The aclgroupoverride function in smbd/posixacls.c in smbd in Samba 3.0.x before 3.0.35, 3.1.x and 3.2.x before 3.2.13, and 3.3.x before 3.3.6, when dos filemode is enabled, allows remote attackers to modify access control lists for files via vectors related to read access to uninitialized memory...

CVE-2009-1888

The aclgroupoverride function in smbd/posixacls.c in smbd in Samba 3.0.x before 3.0.35, 3.1.x and 3.2.x before 3.2.13, and 3.3.x before 3.3.6, when dos filemode is enabled, allows remote attackers to modify access control lists for files via vectors related to read access to uninitialized memory...

CVE-2009-1888

The aclgroupoverride function in smbd/posixacls.c in smbd in Samba 3.0.x before 3.0.35, 3.1.x and 3.2.x before 3.2.13, and 3.3.x before 3.3.6, when dos filemode is enabled, allows remote attackers to modify access control lists for files via vectors related to read access to uninitialized memory...

CVE-2009-1888

The CVE-2009-1888 issue affects Samba’s acl_group_override in smbd/posix_acls.c when dos filemode is enabled, allowing remote modification of file ACLs. Affected ranges: Samba 3.0.x before 3.0.35; 3.1.x before 3.1.x (unspecified point); 3.2.x before 3.2.13; 3.3.x before 3.3.6. Mirroring patches i...

Fedora Core 9 FEDORA-2009-6559 (moin)

The remote host is missing an update to moin announced via advisory FEDORA-2009-6559. OpenVAS Vulnerability Test $Id: fcore20096559.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-6559 moin Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

Fedora Core 9 FEDORA-2009-6559 (moin)

The remote host is missing an update to moin announced via advisory FEDORA-2009-6559. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Uninitialized read of a data value

Description The smbd daemon in Samba 3.0.31 - 3.3.5 contains an uninitialized read of a data value that can potentially affect access control. If a user is trying to modify an access control list ACL and is denied permission, this deny may be overridden if the parameter "dos filemode" is set to...