HFS HTTP File Server 1.5/2.x Multiple Security Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/27423/info HFS HTTP File Server is prone to multiple security vulnerabilities, including cross-site scripting issues, an information-disclosure issue, an arbitrary file-creation issue, a denial-of-service issue, a...

HTTP File Server 2.2 Security Bypass and Denial of Service Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/39544/info HTTP File Server is prone to multiple vulnerabilities including a security-bypass issue and a denial-of-service issue. Exploiting these issues will allow an attacker to download files from restricted directorie...

HFS HTTP File Server 2.2/2.3 Arbitrary File Upload Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/26732/info HFS HTTP File Server is prone to a vulnerability that lets attackers upload files and place them in arbitrary locations on the server. The issue occurs because the software fails to adequately sanitize...

USN-2257-1: Samba vulnerabilities

Christof Schmitt discovered that Samba incorrectly initialized a certain response field when vfs shadow copy was enabled. A remote authenticated attacker could use this issue to possibly obtain sensitive information. This issue only affected Ubuntu 13.10 and Ubuntu 14.04 LTS. CVE-2014-0178 It was...

[slackware-security] samba (SSA:2014-175-04)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 slackware-security samba SSA:2014-175-04 New samba packages are available for Slackware 14.0, 14.1, and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: +--------------------------+...

[slackware-security] samba

New samba packages are available for Slackware 14.0, 14.1, and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/samba-4.1.9-i486-1slack14.1.txz: Upgraded. This update fixes bugs and security issues, including a flaw in Samba's internal DNS...

Debian DSA-2966-1 : samba - security update

Multiple vulnerabilities were discovered and fixed in Samba, a SMB/CIFS file, print, and login server : - CVE-2014-0178 Information leak vulnerability in the VFS code, allowing an authenticated user to retrieve eight bytes of uninitialized memory when shadow copy is enabled. - CVE-2014-0244 Denia...

DSA-2966-1 samba - security update

Bulletin has no description...

PT-2013-67

Name of the Vulnerable Software and Affected Versions Serv-U File Server affected versions not specified Description The issue is related to errors that occur when handling application variable values. This allows a remote attacker to discover the system configuration, including user authenticati...

PT-2013-66

Name of the Vulnerable Software and Affected Versions Serv-U File Server affected versions not specified Description The issue is related to errors in the code of the web interface forms, allowing a remote attacker to modify the system configuration. Recommendations At the moment, there is no...

PT-2013-68

Name of the Vulnerable Software and Affected Versions Serv-U File Server affected versions not specified Description The issue is related to a lack of proper handling of file system access using advanced NTFS syntax. This can be exploited when a URL requested by a user is mapped to locations...

PT-2013-69

Name of the Vulnerable Software and Affected Versions Serv-U File Server affected versions not specified Description The issue is related to an error that occurs when processing an HTTP request with a recursively declared variable. This can be exploited by a remote attacker to cause a denial of...

PT-2013-70

Name of the Vulnerable Software and Affected Versions Serv-U File Server affected versions not specified Description The issue is related to insufficient validation of client-supplied parameters used in HTM scripts, allowing a remote attacker to execute arbitrary JavaScript code in the user's...

USN-1802-1: Samba vulnerability

It was discovered that Samba incorrectly handled CIFS share attributes when SMB2 was used. A remote authenticated user could possibly gain write access to certain shares, bypassing the intended permissions...

Pakistan Government servers messed up after security breach

Today a cyber attack on Pakistan Government servers crash many Government departments's official websites including Ministry of Information Technology, Ministry of Railways, Ministry of Economic Affairs & Statistics, Ministry of Interior, Ministry of Religious Affairs, Ministry of Science and...

Nmap NSE 6.01: smb-enum-sessions

Enumerates the users logged into a system either locally or through an SMB share. The local users can be logged on either physically on the machine, or through a terminal services session. Connections to a SMB share are, for example, people connected to fileshares or making RPC calls. Nmap's...

QuickShare File Server Directory Traversal

A directory traversal vulnerability has been reported in QuickShare File Server...

HTTP File Server Multiple Vulnerabilities

HTTP File Server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:httpfilesever:hfs";...

Incorrect permission checks when granting/removing

Description Samba versions 3.4.x to 3.6.4 inclusive are affected by a vulnerability that allows arbitrary users to modify privileges on a file server. Security checks were incorrectly applied to the Local Security Authority LSA remote proceedure calls RPC CreateAccount, OpenAccount,...

FleaHttpd - Remote Denial of Service

FleaHttpd - Remote Denial of Service !/usr/bin/python """ FleaHttpd Remote Denial Of Service Exploit by condis "FleaHttpd is a http daemon written from scratch in C. When working as a static file server, data show that under certain condition, fleahttpd's speed for static file retrieving can be...