381 matches found
SUSE CVE-2012-4289
epan/dissectors/packet-afp.c in the AFP dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service loop and CPU consumption via a large number of ACL entries...
PT-2022-27421
Name of the Vulnerable Software and Affected Versions Netatalk versions 3.1.13 and earlier Description The issue is related to a heap-based buffer overflow in the afp getappl function, which can be exploited via a crafted .appl file to achieve code execution. This provides remote root access on...
Netatalk 缓冲区错误漏洞
Netatalk is open source software that provides AFP file server functionality for Classic Mac OS and macOS on Unix-like OS. A security vulnerability exists in Netatalk 3.1.13 and earlier versions, which stems from its afpgetappl heap-based buffer overflow allows attackers to achieve command...
Huawei EulerOS: Security Advisory for samba (EulerOS-SA-2022-1763)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2022-22995
The combination of primitives offered by SMB and AFP in their default configuration allows the arbitrary writing of files. By exploiting these combination of primitives, an attacker can execute arbitrary code...
QNAP customers urged to disable AFP to protect against severe vulnerabilities
MacOS users that have a network-attached storage NAS device made by QNAP are being advised to disable the Apple Filing Protocol AFP on their devices until some severe vulnerabilities have been fixed. But QNAP is not the only vendor that needed to fix these vulnerabilities. Others have already don...
QNAP Advises to Mitigate Remote Hacking Flaws Until Patches are Available
Network-attached storage NAS appliance maker QNAP on Wednesday said it's working on updating its QTS and QuTS operating systems after Netatalk last month released patches to contain seven security flaws in its software. Netatalk is an open-source implementation of the Apple Filing Protocol AFP,...
CVE-2022-22995
The combination of primitives offered by SMB and AFP in their default configuration allows the arbitrary writing of files. By exploiting these combination of primitives, an attacker can execute arbitrary code...
CVE-2022-22995
The combination of primitives offered by SMB and AFP in their default configuration allows the arbitrary writing of files. By exploiting these combination of primitives, an attacker can execute arbitrary code...
Default configuration
The combination of primitives offered by SMB and AFP in their default configuration allows the arbitrary writing of files. By exploiting these combination of primitives, an attacker can execute arbitrary code...
CVE-2022-22995
The combination of primitives offered by SMB and AFP in their default configuration allows the arbitrary writing of files. By exploiting these combination of primitives, an attacker can execute arbitrary code...
CVE-2022-22995
The combination of primitives offered by SMB and AFP in their default configuration allows the arbitrary writing of files. By exploiting these combination of primitives, an attacker can execute arbitrary code...
CVE-2022-22995
The combination of primitives offered by SMB and AFP in their default configuration allows the arbitrary writing of files. By exploiting these combination of primitives, an attacker can execute arbitrary code...
CVE-2022-22995
Netatalk (Apple Filing Protocol server) is affected by CVE-2022-22995. The vulnerability arises from a flaw in the interaction between SMB and AFP primitives in default configurations, enabling arbitrary file writes and potentially remote code execution. Demonstrations and advisories reference an...
Feds Secretly Ran a Fake Encrypted Chat App and Busted Over 800 Criminals
In an unprecedented sting operation, the U.S. Federal Bureau of Investigation FBI and Australian Federal Police AFP ran an encrypted chat service called ANoM for nearly three years to intercept 27 million messages exchanged between criminal gang members globally. Dubbed Operation Ironside AFP,...
Western Digital MyCloud PR4100 Link Resolution Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Western Digital MyCloud PR4100. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SMB and AFP services. By creating a symbolic link, an attacke...
CVE-2021-3310
Western Digital My Cloud OS 5 devices before 5.10.122 mishandle Symbolic Link Following on SMB and AFP shares. This can lead to code execution and information disclosure by reading local files...
Information disclosure
Western Digital My Cloud OS 5 devices before 5.10.122 mishandle Symbolic Link Following on SMB and AFP shares. This can lead to code execution and information disclosure by reading local files...
CVE-2021-3310
CVE-2021-3310 affects Western Digital My Cloud OS 5 devices prior to firmware 5.10.122. The flaw arises from mishandling Symbolic Link Following on SMB/AFP shares, enabling either local or remote attackers to achieve information disclosure and, per sources, potential code execution by abusing sym...
