CVE-2014-9377

Heap-based buffer overflow in the nbnsspoof function in plug-ins/nbnsspoof/nbnsspoof.c in Ettercap 0.8.1 allows remote attackers to cause a denial of service or possibly execute arbitrary code via a large netbios packet...

CVE-2014-9377

Heap-based buffer overflow in the nbnsspoof function in plug-ins/nbnsspoof/nbnsspoof.c in Ettercap 0.8.1 allows remote attackers to cause a denial of service or possibly execute arbitrary code via a large netbios packet...

CVE-2014-9377

Heap-based buffer overflow in the nbnsspoof function in plug-ins/nbnsspoof/nbnsspoof.c in Ettercap 0.8.1 allows remote attackers to cause a denial of service or possibly execute arbitrary code via a large netbios packet...

CVE-2014-9377: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the nbnsspoof function in plug-ins/nbnsspoof/nbnsspoof.c in Ettercap 0.8.1 allows remote attackers to cause a denial of service or possibly execute arbitrary code via a large netbios packet...

openSUSE Security Update : samba (openSUSE-SU-2014:1040-1)

"This samba update fixes the following security and non security issues : - Fix winbind service parameter usage; bnc890005. - lib/param: change the default for 'winbind expand groups' to '0'; bnc890008. - Update to 4.1.11. + A malicious browser can send packets that may overwrite the heap of the...

DEBIAN-CVE-2014-3560

NetBIOS name services daemon nmbd in Samba 4.0.x before 4.0.21 and 4.1.x before 4.1.11 allows remote attackers to execute arbitrary code via unspecified vectors that modify heap memory, involving a sizeof operation on an incorrect variable in the unstrcpy macro in stringwrappers.h...

CVE-2014-3560

NetBIOS name services daemon nmbd in Samba 4.0.x before 4.0.21 and 4.1.x before 4.1.11 allows remote attackers to execute arbitrary code via unspecified vectors that modify heap memory, involving a sizeof operation on an incorrect variable in the unstrcpy macro in stringwrappers.h...

CVE-2014-3560

CVE-2014-3560 affects Samba’s NetBIOS name service daemon (nmbd). The issue lies in a heap-memory corruption caused by a sizeof operation on an incorrect variable in the unstrcpy macro in string_wrappers.h, impacting Samba 4.0.x before 4.0.21 and 4.1.x before 4.1.11. This enables remote code exec...

Scientific Linux Security Update : samba4 on SL6.x i386/x86_64 (20140805)

A heap-based buffer overflow flaw was found in Samba's NetBIOS message block daemon nmbd. An attacker on the local network could use this flaw to send specially crafted packets that, when processed by nmbd, could possibly lead to arbitrary code execution with root privileges. CVE-2014-3560 After...

samba: nmbd denial of service

A denial of service flaw was found in the way the sysrecvfile function of nmbd, the NetBIOS message block daemon, processed non-blocking sockets. An attacker could send a specially crafted packet that, when processed, would cause nmbd to enter an infinite loop and consume an excessive amount of C...

Important: Red Hat Security Advisory: samba4 security update

Updated samba4 packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Samba Patches Heap Overflow Bug in Current Versions

The keepers of Samba, an open source software package that provides Windows operability for Linux and UNIX systems, have patched a serious heap overflow vulnerability in all 4.x.x versions of the software. The bug was in the nmbd NetBIOS name services daemon, and a hacker exploiting the flaw coul...

Ubuntu 14.04 LTS : Samba vulnerability (USN-2305-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2305-1 advisory. Volker Lendecke discovered that the Samba NetBIOS name service daemon incorrectly handled certain memory operations. A remote attacker could use this issue to...

Samba memory corruption

Memory corruption on NetBIOS name resolution request parsing...

USN-2305-1 samba vulnerability

Volker Lendecke discovered that the Samba NetBIOS name service daemon incorrectly handled certain memory operations. A remote attacker could use this issue to execute arbitrary code as the root user...

USN-2305-1: Samba vulnerability

Volker Lendecke discovered that the Samba NetBIOS name service daemon incorrectly handled certain memory operations. A remote attacker could use this issue to execute arbitrary code as the root user...

[slackware-security] samba

New samba packages are available for Slackware 14.1 and -current to fix a security issue. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/samba-4.1.11-i486-1slack14.1.txz: Upgraded. This update fixes a remote code execution attack on unauthenticated nmbd NetBIOS name...

Samba 4.x < 4.0.21 / 4.1.11 nmbd Remote Code Execution

According to its banner, the version of Samba on the remote host is 4.x prior to 4.0.21 / 4.1.11. It is, therefore, affected by a flaw in the NetBIOS name services daemon nmbd. This flaw may allow an attacker to execute arbitrary code as the superuser. Note that Nessus has not tested for this iss...

Remote code execution in nmbd

Description All current versions of Samba 4.x.x are vulnerable to a remote code execution vulnerability in the nmbd NetBIOS name services daemon. A malicious browser can send packets that may overwrite the heap of the target nmbd NetBIOS name services daemon. It may be possible to use this to...

CVE-2014-3560

NetBIOS name services daemon nmbd in Samba 4.0.x before 4.0.21 and 4.1.x before 4.1.11 allows remote attackers to execute arbitrary code via unspecified vectors that modify heap memory, involving a sizeof operation on an incorrect variable in the unstrcpy macro in stringwrappers.h...