GLSA-200712-10 : Samba: Execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200712-10 Samba: Execution of arbitrary code Alin Rad Pop Secunia Research discovered a boundary checking error in the sendmailslot function which could lead to a stack-based buffer overflow. Impact : A remote attacker could send ...

samba: send_mailslot() buffer overflow

Stack-based buffer overflow in the sendmailslot function in nmbd in Samba 3.0.0 through 3.0.27a, when the "domain logons" option is enabled, allows remote attackers to execute arbitrary code via a GETDC mailslot request composed of a long GETDC string following an offset username in a SAMLOGON...

Samba: Execution of arbitrary code

Background Samba is a suite of SMB and CIFS client/server programs for UNIX. Description Alin Rad Pop Secunia Research discovered a boundary checking error in the sendmailslot function which could lead to a stack-based buffer overflow. Impact A remote attacker could send a specially crafted...

Samba < 3.0.27 Multiple Vulnerabilities

According to its banner, the version of the Samba server on the remote host contains a boundary error in the 'replynetbiospacket' function in 'nmbd/nmbdpackets.c' when sending NetBIOS replies. Provided the server is configured to run as a WINS server, a remote attacker can exploit this issue by...

samba buffer overflow

Stack-based buffer overflow in nmbd in Samba 3.0.0 through 3.0.26a, when configured as a Primary or Backup Domain controller, allows remote attackers to have an unknown impact via crafted GETDC mailslot requests, related to handling of GETDC logon server requests...

samba -- multiple vulnerabilities

The Samba Team reports: Secunia Research reported a vulnerability that allows for the execution of arbitrary code in nmbd. This defect may only be exploited when the "wins support" parameter has been enabled in smb.conf. Samba developers have discovered what is believed to be a non-exploitable...

Linux initscripts weak permissions

Weak permissions for /var/log/btmp files cause information leak about unsuccessful logon attempt...

About the winlogon process stored in the current user's password problems-vulnerability warning-the black bar safety net

Look at this post before, I was wondering, why I used findpass of the time, sometimes you can find an administrator password, sometimes not? See this post later, slightly understand the point to ------------------------------ The following is from the focus of the post: Q: everyone knows you can...

SOL7923 - Cross-site scripting vulnerability in the logon page after enabling a pre-logon sequence - CVE-2007-6704

A cross-site scripting XSS vulnerability—CVE-2007-6704—exists in the FirePass logon page when a pre-logon sequence is enabled. The affected FirePass URL fails to fully sanitize URL input before the web page content is sent to the browser. It is possible for an attacker to create web pages,...

Cross site scripting

Cross-site scripting XSS vulnerability in the logon page in RSA EnVision 3.3.6 Build 0115 allows remote attackers to inject arbitrary web script or HTML via the username field...

CVE-2007-4900

Cross-site scripting XSS vulnerability in the logon page in RSA EnVision 3.3.6 Build 0115 allows remote attackers to inject arbitrary web script or HTML via the username field...

CVE-2007-4900: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the logon page in RSA EnVision 3.3.6 Build 0115 allows remote attackers to inject arbitrary web script or HTML via the username field...

RSA EnVision Reflected XSS Hole

Application: RSA EnVision Vendor: http://www.rsa.com Version: Version 3.3.6 Build 0115 Bug: Cross-Site Scripting Risk: Medium Date: 12 Sept 2007 Author: Stelios Tigkas e-mail: Stigkas at Gmail dot com Current Employer: Fujitsu Services List: BugTraqSecurityFocus ======= Product ======= A Security...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Cisco CallManager and Unified Communications Manager CUCM before 3.35sr2b, 4.1 before 4.13sr5, 4.2 before 4.23sr2, and 4.3 before 4.31sr1 allow remote attackers to inject arbitrary web script or HTML via the lang variable to the 1 user or 2 adm...

Sql injection

Multiple SQL injection vulnerabilities in Cisco CallManager and Unified Communications Manager CUCM before 3.35sr2b, 4.1 before 4.13sr5, 4.2 before 4.23sr2, and 4.3 before 4.31sr1 allow remote attackers to execute arbitrary SQL commands via the lang variable to the 1 user or 2 admin logon page, a...

CVE-2007-4633

Multiple cross-site scripting XSS vulnerabilities in Cisco CallManager and Unified Communications Manager CUCM before 3.35sr2b, 4.1 before 4.13sr5, 4.2 before 4.23sr2, and 4.3 before 4.31sr1 allow remote attackers to inject arbitrary web script or HTML via the lang variable to the 1 user or 2 adm...

CVE-2007-4634

Multiple SQL injection vulnerabilities in Cisco CallManager and Unified Communications Manager CUCM before 3.35sr2b, 4.1 before 4.13sr5, 4.2 before 4.23sr2, and 4.3 before 4.31sr1 allow remote attackers to execute arbitrary SQL commands via the lang variable to the 1 user or 2 admin logon page, a...

CVE-2007-4634: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Cisco CallManager and Unified Communications Manager CUCM before 3.35sr2b, 4.1 before 4.13sr5, 4.2 before 4.23sr2, and 4.3 before 4.31sr1 allow remote attackers to execute arbitrary SQL commands via the lang variable to the 1 user or 2 admin logon page, a...

CVE-2007-4633: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Cisco CallManager and Unified Communications Manager CUCM before 3.35sr2b, 4.1 before 4.13sr5, 4.2 before 4.23sr2, and 4.3 before 4.31sr1 allow remote attackers to inject arbitrary web script or HTML via the lang variable to the 1 user or 2 adm...

XSS and SQL Injection in Cisco CallManager/Unified Communications Manager Logon Page

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...