Low: Red Hat Security Advisory: samba security, bug fix, and enhancement update

Updated samba packages that fix one security issue, one bug, and add one enhancement are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a...

CVE-2012-1223

The CVE-2012-1223 entry concerns RabidHamster R2/Extreme 1.65 and earlier. The vulnerability stems from a small PIN-guessing search space that allows remote attackers to brute-force and obtain the PIN, exposing partial confidentiality. According to the provided details, the attack is possible ove...

PT-2012-3145

Name of the Vulnerable Software and Affected Versions RabidHamster R2/Extreme versions 1.65 and earlier Description The issue allows remote authenticated users to execute arbitrary code via a long string to the TCP port 23. Recommendations For versions 1.65 and earlier, update to a version later...

CVE-2012-1222

CVE-2012-1222 describes a stack-based buffer overflow in RabidHamster R2/Extreme 1.65 and earlier. The issue allows remote authenticated users to execute arbitrary code by sending a long string to TCP port 23. The connected sources (NVD, PRION, CVE lists) corroborate the same vulnerability detail...

PT-2012-3144

Name of the Vulnerable Software and Affected Versions RabidHamster R2/Extreme versions 1.65 and earlier Description A directory traversal issue in the telnet server allows remote attackers to read arbitrary files by using a .. dot dot in the File command. Recommendations For versions 1.65 and...

CVE-2012-1223: Exposure of Sensitive Information to an Unauthorized Actor

RabidHamster R2/Extreme 1.65 and earlier uses a small search space of values for the PIN number, which allows remote attackers to obtain the PIN number via a brute force attack...

PT-2012-3146

Name of the Vulnerable Software and Affected Versions RabidHamster R2/Extreme versions 1.65 and earlier Description The issue allows remote attackers to obtain the PIN number via a brute force attack due to the use of a small search space of values for the PIN number. Recommendations For versions...

CVE-2012-1221

CVE-2012-1221 describes a directory traversal in the telnet server of RabidHamster R2/Extreme, affecting 1.65 and earlier. Remote attackers can read arbitrary files via .. in the File command. The provided sources confirm the vulnerability details but do not specify patches or remediation steps.

CVE-2012-1222

Stack-based buffer overflow in RabidHamster R2/Extreme 1.65 and earlier allows remote authenticated users to execute arbitrary code via a long string to TCP port 23...

CVE-2012-1222: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in RabidHamster R2/Extreme 1.65 and earlier allows remote authenticated users to execute arbitrary code via a long string to TCP port 23...

RedHat Update for samba RHSA-2012:0313-03

Check for the Version of samba OpenVAS Vulnerability Test RedHat Update for samba RHSA-2012:0313-03 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...

CVE-2012-1221: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the telnet server in RabidHamster R2/Extreme 1.65 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the File command...

R2Extreme 1.65 - Stack Buffer Overflow Directory Traversal

R2Extreme 1.65 - Stack Buffer Overflow Directory Traversal source: https://www.securityfocus.com/bid/52061/info R2/Extreme is prone to a stack-based buffer-overflow vulnerability and a directory-traversal vulnerability. Exploiting these issues may allow remote attackers to execute arbitrary code ...

R2 1.65 Stack Overflow / Directory Traversal / Brute Forcing

Luigi Auriemma Application: R2 http://www.rabidhamster.org/R2/ Versions: = 1.65 Platforms: Windows Bugs: A stack overflow B directory traversal C PIN brute forcing Exploitation: remote Date: 09 Feb 2012 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1 Introduction 2 Bugs 3 Th...

R2/Extreme 1.65 - Stack Buffer Overflow / Directory Traversal

source: https://www.securityfocus.com/bid/52061/info R2/Extreme is prone to a stack-based buffer-overflow vulnerability and a directory-traversal vulnerability. Exploiting these issues may allow remote attackers to execute arbitrary code or retrieve arbitrary files within the context of the...

MS12-012: Vulnerability in Color Control Panel Could Allow Remote Code Execution (2643719)

The remote host contains a version of Windows Color Control Panel that is affected by an insecure library loading vulnerability. A remote attacker could exploit this by tricking a user into opening a .camp, .cdmp, .gmmp, .icc, or .icm file in a directory that also contains a malicious 'sti.dll'...

MS12-010: Cumulative Security Update for Internet Explorer (2647516)

The remote host is missing Internet Explorer IE Security Update 2647516. The installed version of IE is affected by several vulnerabilities that could allow an attacker to execute arbitrary code on the remote host as well as vulnerabilities that could allow the attacker to view privileged...

Gentoo Security Advisory GLSA 201110-09 (Conky)

The remote host is missing updates announced in advisory GLSA 201110-09. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

Gentoo Security Advisory GLSA 201110-10 (Wget)

The remote host is missing updates announced in advisory GLSA 201110-10. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

PT-2012-1325

Name of the Vulnerable Software and Affected Versions Microsoft Windows Server 2008 SP2, R2, and R2 SP1 Description The issue allows local users to gain privileges via a Trojan horse sti.dll file in the current working directory. This can be demonstrated by a directory that contains a .camp, .cdm...