CVE-2009-2031

The CVE-2009-2031 entry applies to Sun OpenSolaris smbfs (SNV_84 to SNV_110). It describes a localPrivilege issue where, when default mount permissions are used, local users can read arbitrary files and list arbitrary directories on CIFS volumes . The description identifies the affected component...

CVE-2009-2012

Unspecified vulnerability in idmap in Sun OpenSolaris snv88 through snv110, when a CIFS server is enabled, allows local users to cause a denial of service idpmapd daemon crash and idmapd outage via unknown vectors...

Code injection

Unspecified vulnerability in idmap in Sun OpenSolaris snv88 through snv110, when a CIFS server is enabled, allows local users to cause a denial of service idpmapd daemon crash and idmapd outage via unknown vectors...

CVE-2009-2012

Unspecified vulnerability in idmap in Sun OpenSolaris snv88 through snv110, when a CIFS server is enabled, allows local users to cause a denial of service idpmapd daemon crash and idmapd outage via unknown vectors...

CVE-2009-2012

CVE-2009-2012 affects Sun OpenSolaris with CIFS server enabled, in idmap within SNV builds snv_88 through snv_110. A local-privilege context allows denial of service, causing idpmapd daemon crash and idmapd outage via unknown vectors. The public records do not provide concrete exploitation detail...

RedHat Security Advisory RHSA-2009:1081

The remote host is missing updates to kernel-rt announced in advisory RHSA-2009:1081. These updated packages fix the following security issues: a buffer overflow flaw was found in the CIFSTCon function of the Linux kernel Common Internet File System CIFS implementation. When mounting a CIFS share...

RedHat Security Advisory RHSA-2009:1081

The remote host is missing updates to kernel-rt announced in advisory RHSA-2009:1081. These updated packages fix the following security issues: a buffer overflow flaw was found in the CIFSTCon function of the Linux kernel Common Internet File System CIFS implementation. When mounting a CIFS share...

kernel: cifs: memory overwrite when saving nativeFileSystem field during mount

Buffer overflow in fs/cifs/connect.c in CIFS in the Linux kernel 2.6.29 and earlier allows remote attackers to cause a denial of service crash via a long nativeFileSystem field in a Tree Connect response to an SMB mount request...

[SECURITY] [DSA 1809-1] New Linux 2.6.26 packages fix several vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ---------------------------------------------------------------------- Debian Security Advisory DSA-1809-1 [email protected] http://www.debian.org/security/ dann frazier Jun 01, 2009 http://www.debian.org/security/faq -...

Linux kernel multiple security vulnerabilities

CIFS client buffer overflow, Xen DoS, nfs4 files execution...

CVE-2009-1633

Multiple buffer overflows in the cifs subsystem in the Linux kernel before 2.6.29.4 allow remote CIFS servers to cause a denial of service memory corruption and possibly have unspecified other impact via 1 a malformed Unicode string, related to Unicode string area alignment in fs/cifs/sess.c; or ...

Buffer overflow

Multiple buffer overflows in the cifs subsystem in the Linux kernel before 2.6.29.4 allow remote CIFS servers to cause a denial of service memory corruption and possibly have unspecified other impact via 1 a malformed Unicode string, related to Unicode string area alignment in fs/cifs/sess.c; or ...

CVE-2009-1633

Multiple buffer overflows in the cifs subsystem in the Linux kernel before 2.6.29.4 allow remote CIFS servers to cause a denial of service memory corruption and possibly have unspecified other impact via 1 a malformed Unicode string, related to Unicode string area alignment in fs/cifs/sess.c; or ...

CVE-2009-1633

The CVE-2009-1633 issue affects the Linux kernel CIFS subsystem prior to 2.6.29.4. It describes multiple buffer overflows in CIFS that can be triggered by a malformed Unicode string (Unicode string area alignment in fs/cifs/sess.c) or long Unicode characters (fs/cifs/cifssmb.c and fs/cifs/readdir...

Cisco Adaptive Security Appliance 8.x - Web VPN FTP or CIFS Authentication Form Phishing

source: https://www.securityfocus.com/bid/35475/info Cisco Adaptive Security Appliance ASA is prone to a vulnerability that can aid in phishing attacks. An attacker can exploit this issue to display a fake login window that's visually similar to the device's login window, which may mislead users...

Linux Kernel CIFS字符串转换多个缓冲区溢出漏洞

BUGTRAQ ID: 34989 CVECAN ID: CVE-2009-1633 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel的cifs处理代码通常将ucs2le字符串（windows所使用的双字节编码方案）转换为本地NLS字符集。字符串转换例程仅接受由所要转换的宽字符数所指定的单个长度参数，因此假设目标缓冲区已足够大，但实际上特制的CIFS字符串仍可触发缓冲区溢出。 Linux kernel 2.6.29 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Debian DSA-1800-1 : linux-2.6 - denial of service/privilege escalation/sensitive memory leak

Several vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service, privilege escalation or a sensitive memory leak. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-0028 Chris Evans discovered a situation in which ...

HP-UX Update for CIFS Samba Server HPSBUX01086

Check for the Version of CIFS Samba Server OpenVAS Vulnerability Test HP-UX Update for CIFS Samba Server HPSBUX01086 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

HP-UX Update for CIFS Server (Samba) HPSBUX02218

Check for the Version of CIFS Server Samba OpenVAS Vulnerability Test HP-UX Update for CIFS Server Samba HPSBUX02218 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

HP-UX Update for HP CIFS Server (Samba) HPSBUX02341

Check for the Version of HP CIFS Server Samba OpenVAS Vulnerability Test HP-UX Update for HP CIFS Server Samba HPSBUX02341 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...