CVE-2019-12436

Samba 4.10.x before 4.10.5 has a NULL pointer dereference, leading to an AD DC LDAP server Denial of Service. This is related to an attacker using the paged search control. The attacker must have directory read access in order to attempt an exploit...

CVE-2019-12435

Samba 4.9.x before 4.9.9 and 4.10.x before 4.10.5 has a NULL pointer dereference, leading to Denial of Service. This is related to the AD DC DNS management server dnsserver RPC server process...

CVE-2019-12435

CVE-2019-12435 affects Samba 4.9.x before 4.9.9 and 4.10.x before 4.10.5, where a NULL pointer dereference in the AD DC DNS management server (dnsserver) RPC server can cause Denial of Service. The vulnerability is tied to the dnsserver RPC handling in these branches; exploitation details are not...

CVE-2019-12435

Samba 4.9.x before 4.9.9 and 4.10.x before 4.10.5 has a NULL pointer dereference, leading to Denial of Service. This is related to the AD DC DNS management server dnsserver RPC server process...

CVE-2019-12435

Samba 4.9.x before 4.9.9 and 4.10.x before 4.10.5 has a NULL pointer dereference, leading to Denial of Service. This is related to the AD DC DNS management server dnsserver RPC server process...

CVE-2019-12435

Samba 4.9.x before 4.9.9 and 4.10.x before 4.10.5 has a NULL pointer dereference, leading to Denial of Service. This is related to the AD DC DNS management server dnsserver RPC server process. Mitigation The dnsserver task can be stopped by setting dcerpc endpoint servers = -dnsserver in the...

CVE-2019-12435

Samba 4.9.x before 4.9.9 and 4.10.x before 4.10.5 has a NULL pointer dereference, leading to Denial of Service. This is related to the AD DC DNS management server dnsserver RPC server process...

CVE-2019-12436

Samba 4.10.x before 4.10.5 has a NULL pointer dereference, leading to an AD DC LDAP server Denial of Service. This is related to an attacker using the paged search control. The attacker must have directory read access in order to attempt an exploit...

CVE-2019-12436: NULL Pointer Dereference

Samba 4.10.x before 4.10.5 has a NULL pointer dereference, leading to an AD DC LDAP server Denial of Service. This is related to an attacker using the paged search control. The attacker must have directory read access in order to attempt an exploit...

PT-2019-5407

Name of the Vulnerable Software and Affected Versions Samba versions 4.10.x through 4.10.4 Description The issue is related to a NULL pointer dereference error, which can be exploited by a remote attacker to cause a Denial of Service DoS on the AD DC LDAP server. The attacker must have directory...

Samba AD DC LDAP server crash (paged searches)

Description A user with read access to the LDAP server can crash the LDAP server process. Depending on the Samba version and the choice of process model, this may crash only the user's own connection. Specifically, while in Samba 4.10 the default is for one process per connected client,...

A week in security (June 10 – 16)

Last week on Malwarebytes Labs, we revealed to readers the mindset of security pros as to why they lack confidence in their ability to prevent their organizations getting breached. We also reported on Maine Governor Janet Mills implementing the state’s own privacy protections, how Apple can bette...

SQL Injection Vulnerability in Ad***.aspx Page of Bibliographic Data Retrieval System of Beijing Jinpan Pengtu Software Technology Co.

Beijing Jinpan Pengtu Software Technology Co., Ltd. is a high-tech enterprise specializing in the research and development of library information automation products, promotion and application and system maintenance. The Ad.aspx page of the bibliographic data retrieval system of Beijing Jinpan...

Google Says It Won't Kill Ad Blockers. Ad Blockers Disagree

Upcoming changes to Chrome has left ad blockers up in arms. But Google insists it won't stifle the extensions...

A week in security (June 3 – 9)

Last week on Malwarebytes Labs, we rounded up some leaks and breaches, reported about Magecart skimmers found on Amazon CloudFront CDN, proudly announced we were awarded as Best Cybersecurity Vendor Blog at the annual EU Security Blogger Awards, discussed how Maine inches closer to shutting down...

WordPress Plugin Ad-Manager Open Redirect Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. An open redirection vulnerability exists in the WordPress plugin Ad-Manager. An attacker could successfully launch a phishing...

Google may limit ad blockers for Chrome users

By Ryan De Souza Google May Limit Ad blockers for Regular Users Amidst Criticism from Consumer Advocates. Google Chrome is perhaps the most popular of all web and mobile browsers at the moment, and this popularity is a result of various user-friendly features that it offers. However, the recent...

Security News This Week: A Teen Waltzed Into Mar-a-Lago

Google's ad-blocking backlash, a privacy lawsuit against Apple, and more of the week's top security news...

Bo-blog Wind CMS ad***.mo***.php page suffers from SQL injection vulnerability

Bo-blog Wind BW for short is a lightweight personal blogging program. A SQL injection vulnerability exists in the Bo-blog Wind CMS ad.mo.php page. An attacker can exploit the vulnerability to obtain sensitive database information...

Cross site scripting

In Zoho ManageEngine ADSelfService Plus 5.x through 5704, an authorization.do cross-site Scripting XSS vulnerability allows for an unauthenticated manipulation of the JavaScript code by injecting the HTTP form parameter adscsrf. An attacker can use this to capture a user's AD self-service passwor...