Checkpoint NGX rule definition vulnerability

"CIFS" rule includes all traffic...

Rule bypassing in CheckPoint NGX R60

Hi folks, as playing a little bit with CheckPoint NGX new release R60, I noticed a serious problem with the predefined service group "CIFS". This group includes the services called "microsoft-ds" TCP Port 445 and the predefined service group "NBT", which includes some old smb-stuff. If I use this...

CVE-2005-2852

Unknown vulnerability in CIFS.NLM in Novell Netware 6.5 SP2 and SP3, 5.1, and 6.0 allows remote attackers to cause a denial of service ABEND via an incorrect password length, as exploited by the "worm.rbot.ccc" worm...

Oracle Forms 6i/9i/4.5.10/5.0/6.0.8/10g Services - Unauthorized Form Execution

source: https://www.securityfocus.com/bid/14319/info Oracle Forms Services is susceptible to an unauthorized form execution vulnerability. Attackers may exploit this vulnerability to execute arbitrary commands with the privileges of the Oracle account under which the server is executing. It shoul...

CVE-2002-1955

Technical details (affected products, versions, root cause, or fixes) are not publicly provided in the supplied documents. Monitor for updates.

HP-UX PHNE_24164 : s700_800 11.X CIFS/9000 Server A.01.06 Cumulative Patch

s700800 11.X CIFS/9000 Server A.01.06 Cumulative Patch : CIFS/9000 Server SAMBA allows malicious local users to overwrite arbitrary files and devices. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHNE24164...

Novell Netware CIFS DoS

Error in file protocol handling leads to crash in CIFS.NLM...

[SA13766] Novell Netware CIFS Denial of Service Vulnerability

TITLE: Novell Netware CIFS Denial of Service Vulnerability SECUNIA ADVISORY ID: SA13766 VERIFY ADVISORY: http://secunia.com/advisories/13766/ CRITICAL: Less critical IMPACT: DoS WHERE: From local network OPERATING SYSTEM: Novell Netware 5.x http://secunia.com/product/79/ Novell Netware 6.x...

RHEL 2.1 : samba (RHSA-2004:498)

Updated samba packages that fix an input validation vulnerability are now available. Samba provides file and printer sharing services to SMB/CIFS clients. Karol Wiesek discovered an input validation issue in Samba prior to 3.0.6. An authenticated user could send a carefully crafted request to the...

HP-UX CIFS (Samba) buffer overflow

Buffer overflow leads to unauthorized remote access...

[security bulletin] SSRT4782 rev. 0 HP-UX CIFS Server potential remote root access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 HP SECURITY BULLETIN HPSBUX01062 REVISION: 0 SSRT4782 rev. 0 HP-UX CIFS Server potential remote root access ----------------------------------------------------------------- NOTICE: There are no restrictions for distribution of this Bulletin provided...

CVE-2003-0085

Samba vulnerability CVE-2003-0085 is a remote, unauthenticated buffer overflow in the SMB/CIFS packet fragment re-assembly code used by smbd, affecting Samba prior to 2.2.8 and Samba-TNG prior to 0.3.1. An attacker could remotely execute arbitrary code (often with root privileges) by sending craf...

Multiple bugs in Samba

Buffer overflow on SMB/CIFS packet re-assembly, chown race conditions...

Samba SMB/CIFS Packet Assembling Buffer Overflow Vulnerability

Description Samba is prone to a buffer-overflow vulnerability when the 'smbd' service tries to reassemble specially crafted SMB/CIFS packets. An attacker can exploit this vulnerability by creating a specially formatted SMB/CIFS packet and sending it to a vulnerable Samba server. The overflow...

Samba 2.2.x - CIFS9000 Server A.01.x Packet Assembling Buffer Overflow

Samba 2.2.x - CIFS9000 Server A.01.x Packet Assembling Buffer Overflow / source: https://www.securityfocus.com/bid/7106/info Samba is prone to a buffer-overflow vulnerability when the ' ' service tries to reassemble specially crafted SMB/CIFS packets. An attacker can exploit this vulnerability by...

CVE-2002-1955

Iomega NAS A300U uses cleartext LANMAN authentication when mounting CIFS/SMB drives, which allows remote attackers to perform a man-in-the-middle attack...

HP CIFS/9000 Server A.01.05/A.01.06 - Local Buffer Overflow

// source: https://www.securityfocus.com/bid/5088/info A vulnerability has been reported in the /opt/cifsclient/bin/cifslogin utility distributed with CIFS/9000. The utility is prone to several buffer overflow conditions and may lead to root compromise. The vulnerability occurs due to the lack of...

CVE-2002-0991

Buffer overflows in the cifslogin command for HP CIFS/9000 Client A.01.06 and earlier, based on the Sharity package, allows local users to gain root privileges via long 1 -U, 2 -D, 3 -P, 4 -S, 5 -N, or 6 -u parameters...

CVE-2002-0991

CVE-2002-0991 : Buffer overflows in the cifslogin command of HP CIFS/9000 Client A.01.06 and earlier (based on the Sharity package) allow local users to gain root privileges by supplying excessively long parameters (-U, -D, -P, -S, -N, or -u). Affected versions are A.01.06 and earlier. The provid...

CVE-2002-0991

Buffer overflows in the cifslogin command for HP CIFS/9000 Client A.01.06 and earlier, based on the Sharity package, allows local users to gain root privileges via long 1 -U, 2 -D, 3 -P, 4 -S, 5 -N, or 6 -u parameters...