Solaris 10 (sparc) : 138874-05

SunOS 5.10: Native LDAP, PAM, name-service. Date this patch was last updated by Sun : Aug/17/09 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

VulnCheck KEV: CVE-2009-1923

Heap-based buffer overflow in the Windows Internet Name Service WINS component for Microsoft Windows 2000 SP4 and Server 2003 SP2 allows remote attackers to execute arbitrary code via a crafted WINS replication packet that triggers an incorrect buffer-length calculation, aka "WINS Heap Overflow...

CVE-2009-1923

Heap-based buffer overflow in the Windows Internet Name Service WINS component for Microsoft Windows 2000 SP4 and Server 2003 SP2 allows remote attackers to execute arbitrary code via a crafted WINS replication packet that triggers an incorrect buffer-length calculation, aka "WINS Heap Overflow...

CVE-2009-1924

Integer overflow in the Windows Internet Name Service WINS component for Microsoft Windows 2000 SP4 allows remote WINS replication partners to execute arbitrary code via crafted data structures in a packet, aka "WINS Integer Overflow Vulnerability."...

SquirrelMail: Server-side code injection in map_yp_alias username map

The mapypalias function in functions/imapgeneral.php in SquirrelMail before 1.4.18 and NaSMail before 1.7 allows remote attackers to execute arbitrary commands via shell metacharacters in a username string that is used by the ypmatch program...

name service daemon buffer overflow

No description provided...

Microsoft MS03-034 security check

Under certain conditions, the response to a NetBT Name Service query may, in addition to the typical reply, contain random data from the target system's memory. This data could, for example, be a segment of HTML if the user on the target system was using an Internet browser, or it could contain...

Sun Solaris Name Service Cache Daemon (nscd(1M))本地特权提升漏洞

BUGTRAQ ID: 32921 CNCAN ID：CNCAN-2008122006 Sun Solaris是一款商业性质的操作系统。 Solaris名字服务缓存守护程序（name service cache daemon nscd1M）在部分条件下存在安全漏洞。允许非特权用户获得对未授权信息的访问和获得高特权。 目前没有详细漏洞细节提供。 Sun Solaris 10.0x86 Sun Solaris 10.0 Sun OpenSolaris build snv96 Sun OpenSolaris build snv95 Sun OpenSolaris build snv92 Sun...

nss_ldap randomly replying with wrong user's data

Race condition in nssldap, when used in applications that are linked against the pthread library and fork after a call to nssldap, might send user data to the wrong process because of improper handling of the LDAP connection. NOTE: this issue was originally reported for Dovecot with the wrong...

nss_ldap randomly replying with wrong user's data

Race condition in nssldap, when used in applications that are linked against the pthread library and fork after a call to nssldap, might send user data to the wrong process because of improper handling of the LDAP connection. NOTE: this issue was originally reported for Dovecot with the wrong...

Samba "reply_netbios_packet()" Buffer Overflow Vulnerability

Stack-based buffer overflow in the replynetbiospacket function in nmbd/nmbdpackets.c in nmbd in Samba 3.0.0 through 3.0.26a, when operating as a WINS server, allows remote attackers to execute arbitrary code via crafted WINS Name Registration requests followed by a WINS Name Query request...

samba incorrect primary group assignment for domain users using the rfc2307 or sfu winbind nss info plugin

The Winbind nssinfo extension nsswitch/idmapad.c in idmapad.so in Samba 3.0.25 through 3.0.25c, when the "winbind nss info" option is set to rfc2307 or sfu, grants all local users the privileges of gid 0 when the 1 RFC2307 or 2 Services for UNIX SFU primary group attribute is not defined...

Samba "reply_netbios_packet()" Buffer Overflow Vulnerability

Stack-based buffer overflow in the replynetbiospacket function in nmbd/nmbdpackets.c in nmbd in Samba 3.0.0 through 3.0.26a, when operating as a WINS server, allows remote attackers to execute arbitrary code via crafted WINS Name Registration requests followed by a WINS Name Query request...

CVE-2007-3458

The libsldap library in Sun Solaris 8, 9, and 10 allows local users to cause a denial of service Name Service Caching Daemon nscd crash via unspecified vectors...

DSA-1319-1 maradns

Bulletin has no description...

CVE-2006-7038

Multiple buffer overflows in MERCUR Messaging 2005 before Service Pack 4 allow remote attackers to cause a denial of service crash via 1 "long command lines at port 32000" and 2 certain name service queries that are not properly handled by the SMTP service...

[Full-disclosure] PeanutHull Local Privilege Escalation Vulnerability

PeanutHull Local Privilege Escalation Vulnerability by Sowhat EN: http://secway.org/advisory/AD20050720EN.txt CN: http://secway.org/advisory/AD20050720CN.txt Product Affected: PeanutHull = 3.0 Beta 5 Overview: Oray Inc. is the world's biggest DDNS Dynamic Domain Name Service Provider According to...

MS Windows (WINS) Remote Buffer Overflow Exploit (v.3)

Exploit for unknown platform in category remote exploits ====================================================== MS Windows WINS Remote Buffer Overflow Exploit v.3 ====================================================== / Windows Internet Name Service WINS Remote Heap Buffer Overflow...

Microsoft Windows - WINS Remote Buffer Overflow (MS04-045) (3)

Microsoft Windows - WINS Remote Buffer Overflow MS04-045 3 / Windows Internet Name Service WINS Remote Heap Buffer Overflow ------------------------------------ ------------------------------------ Advisory credits: ---------------- Nicolas Waisman of Immunity Inc. www.immunitysec.com Advisory...

Debian DSA-196-1 : bind - several vulnerabilities

Bind version 9, the bind9 package, is not affected by these problems. ISS X-Force has discovered several serious vulnerabilities in the Berkeley Internet Name Domain Server BIND. BIND is the most common implementation of the DNS Domain Name Service protocol, which is used on the vast majority of...