libsmbclient, libwbclient, samba security update

CentOS Errata and Security Advisory CESA-2014:1008 Updated samba packages that fix one security issue and one bug are now available for Red Hat Enterprise Linux 7. The Red Hat Security Response Team has rated this update as having Important security impact. A Common Vulnerability Scoring System...

CVE-2013-6691

The WebVPN CIFS implementation in Cisco Adaptive Security Appliance ASA Software 9.0.4.1 and earlier allows remote CIFS servers to cause a denial of service device reload via a long share list, aka Bug ID CSCuj83344...

Code injection

The WebVPN CIFS implementation in Cisco Adaptive Security Appliance ASA Software 9.0.4.1 and earlier allows remote CIFS servers to cause a denial of service device reload via a long share list, aka Bug ID CSCuj83344...

CVE-2013-6691

CVE-2013-6691 affects Cisco ASA WebVPN CIFS: the CIFS access function fails bounds-checks when enumerating large shares, enabling an authenticated, remote attacker to trigger a DoS (device reload) on ASA devices running 9.0(.4.1) or earlier. The vulnerability stems from missing bounds checks on r...

CVE-2013-6691

The WebVPN CIFS implementation in Cisco Adaptive Security Appliance ASA Software 9.0.4.1 and earlier allows remote CIFS servers to cause a denial of service device reload via a long share list, aka Bug ID CSCuj83344...

Cisco ASA CIFS Share Enumeration Denial of Service Vulnerability

A vulnerability in the WebVPN Common Internet File System CIFS access function of Cisco Adaptive Security Appliance ASA could allow an authenticated, remote attacker to trigger a reload of the affected device. The vulnerability is due to missing bounds checks on the response received from the CIF...

CentOS 5 / 6 : samba / samba3x (CESA-2014:0866)

Updated samba3x and samba packages that fix two security issues are now available for Red Hat Enterprise Linux 5 and 6 respectively. The Red Hat Security Response Team has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detail...

libsmbclient, samba, samba3x security update

CentOS Errata and Security Advisory CESA-2014:0866 Updated samba3x and samba packages that fix two security issues are now available for Red Hat Enterprise Linux 5 and 6 respectively. The Red Hat Security Response Team has rated this update as having Moderate security impact. Common Vulnerability...

Moderate: Red Hat Security Advisory: samba and samba3x security update

Updated samba3x and samba packages that fix two security issues are now available for Red Hat Enterprise Linux 5 and 6 respectively. The Red Hat Security Response Team has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detail...

Samba SMB 2.2.x,CIFS/9000 Server A.01.x Packet Assembling Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7106/info Samba is prone to a buffer-overflow vulnerability when the 'smbd' service tries to reassemble specially crafted SMB/CIFS packets. An attacker can exploit this vulnerability by creating a specially formatted...

HP CIFS/9000 Server A.01.05/A.01.06 Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/5088/info A vulnerability has been reported in the /opt/cifsclient/bin/cifslogin utility distributed with CIFS/9000. The utility is prone to several buffer overflow conditions and may lead to root compromise. The...

Oracle Reports Server 6.0.8/9.0.x Unauthorized Report Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/14316/info Oracle Reports Server is susceptible to an unauthorized report execution vulnerability. By placing a report file in a globally accessible location, users can trigger the execution of the report by issuing an HT...

Linux Kernel 2.6.x CIFS CHRoot Security Restriction Bypass Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/17742/info The Linux Kernel is prone to a vulnerability that allows attackers to bypass a security restriction. This issue is due to a failure in the kernel to properly sanitize user-supplied data. The problem affects...

Cisco Adaptive Security Appliance 8.x Web VPN FTP or CIFS Authentication Form Phishing Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/35475/info Cisco Adaptive Security Appliance ASA is prone to a vulnerability that can aid in phishing attacks. An attacker can exploit this issue to display a fake login window that's visually similar to the device's logi...

USN-2257-1: Samba vulnerabilities

Christof Schmitt discovered that Samba incorrectly initialized a certain response field when vfs shadow copy was enabled. A remote authenticated attacker could use this issue to possibly obtain sensitive information. This issue only affected Ubuntu 13.10 and Ubuntu 14.04 LTS. CVE-2014-0178 It was...

Debian DSA-2966-1 : samba - security update

Multiple vulnerabilities were discovered and fixed in Samba, a SMB/CIFS file, print, and login server : - CVE-2014-0178 Information leak vulnerability in the VFS code, allowing an authenticated user to retrieve eight bytes of uninitialized memory when shadow copy is enabled. - CVE-2014-0244 Denia...

[SECURITY] [DSA 2966-1] samba security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2966-1 [email protected] http://www.debian.org/security/ Yves-Alexis Perez June 23, 2014 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 2966-1 (samba - security update)

Multiple vulnerabilities were discovered and fixed in Samba, a SMB/CIFS file, print, and login server: CVE-2014-0178 Information leak vulnerability in the VFS code, allowing an authenticated user to retrieve eight bytes of uninitialized memory when shadow copy is enabled. CVE-2014-0244 Denial of...

DSA-2966-1 samba - security update

Bulletin has no description...

Debian: Security Advisory (DSA-2966-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...