373 matches found
CVE-2010-2524
The DNS resolution functionality in the CIFS implementation in the Linux kernel before 2.6.35, when CONFIGCIFSDFSUPCALL is enabled, relies on a user's keyring for the dnsresolver upcall in the cifs.upcall userspace helper, which allows local users to spoof the results of DNS queries and perform...
CVE-2010-2524
The DNS resolution functionality in the CIFS implementation in the Linux kernel before 2.6.35, when CONFIGCIFSDFSUPCALL is enabled, relies on a user's keyring for the dnsresolver upcall in the cifs.upcall userspace helper, which allows local users to spoof the results of DNS queries and perform...
Cisco IOS DFS Access List Leakage - Cisco Systems
Errors in certain Cisco IOS software versions for certain routers can cause IP datagrams to be output to network interfaces even though access lists have been applied to filter those datagrams. This applies to routers from the Cisco 7xxx family only, and only when those routers have been configur...
Samba netdfs_io_dfs_EnumInfo_d Heap Overflow Vulnerability
This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Samba. User interaction is not required to exploit this vulnerability. The specific flaw exists in the parsing of RPC requests to the DFS RPC interface. When parsing a request to DFSEnum, heap allocation ...
samba heap overflows
Multiple heap-based buffer overflows in the NDR parsing in smbd in Samba 3.0.0 through 3.0.25rc3 allow remote attackers to execute arbitrary code via crafted MS-RPC requests involving 1 DFSEnum netdfsiodfsEnumInfod, 2 RFNPCNEX smbionotifyoptiontypedata, 3 LsarAddPrivilegesToAccount...
CVE-1999-1295
CVE-1999-1295 affects Transarc DCE Distributed File System (DFS) 1.1 on Solaris 2.4/2.5. The grouplist is not properly initialized for users in large groups, potentially allowing them to access resources protected by DFS. Vulnerability details indicate partial impact to confidentiality, integrity...
CVE-1999-1295
Transarc DCE Distributed File System DFS 1.1 for Solaris 2.4 and 2.5 does not properly initialize the grouplist for users who belong to a large number of groups, which could allow those users to gain access to resources that are protected by DFS...
CVE-1999-1464
CVE-1999-1464 affects Cisco IOS 11.1CC and 11.1CT with distributed fast switching (DFS) enabled. The issue allows bypassing certain access-control lists when switching traffic from a DFS-enabled interface to an interface without DFS enabled, as described by Cisco bug CSCdk35564. Connected sources...
CVE-1999-1465
Cisco IOS 11.1–11.3 with distributed fast switching (DFS) enabled is affected by CVE-1999-1465. The vulnerability allows remote attackers to bypass ACLs when switching traffic from a DFS-enabled input interface to an output interface with a logical subinterface, as described by Cisco bug CSCdk438...
CVE-1999-1295: Undefined Security Weakness
Transarc DCE Distributed File System DFS 1.1 for Solaris 2.4 and 2.5 does not properly initialize the grouplist for users who belong to a large number of groups, which could allow those users to gain access to resources that are protected by DFS...
CVE-1999-1465: Undefined Security Weakness
Vulnerability in Cisco IOS 11.1 through 11.3 with distributed fast switching DFS enabled allows remote attackers to bypass certain access control lists when the router switches traffic from a DFS-enabled input interface to an output interface with a logical subinterface, as described by Cisco bug...
