SMB Client plugin for FE - Exported ContentProvider, Runtime privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application SMB Client plugin for FE published at the 'play' market has multiple vulnerabilities...

Samba smbd Daemon Symlink Verification Information Disclosure (CVE-2015-5252)

An information disclosure vulnerability has been reported in Samba. The vulnerability is due to flaws in the symbolic link verification mechanism. A remote, authenticated attacker could exploit this vulnerability by using an SMB client to request for files or directories outside the share path...

The vulnerability of the Mac OS X operating system allows a perpetrator to gain access to protected information in the kernel’s memory.

The vulnerability of the SMBClient component in the Mac OS X operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an intruder, operating locally, to gain access to protected information in the kernel memory...

Apple OS X SMBClient Memory Disclosure Vulnerability

Apple OS X is an operating system developed by Apple Inc. Apple OS X SMBClient has a problem that allows local users to exploit a vulnerability to access the contents of kernel memory...

Apple OS X SMB Client Buffer Overflow Vulnerability

Apple OS X is a proprietary operating system developed by Apple for Mac computers, and SMB client is a client program component that provides access to SMB/CIFS servers. A security vulnerability exists in the SMB client in Apple OS X versions prior to 10.10.5. A remote attacker could exploit this...

CVE-2015-3773

The SMB client in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via unspecified vectors...

CVE-2015-3773

The SMB client in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via unspecified vectors...

CVE-2015-3773

CVE-2015-3773 : A memory-corruption vulnerability in the SMB client of Apple OS X prior to 10.10.5 may allow a remote attacker to execute arbitrary code or cause a denial of service (memory corruption and app crash) via unspecified vectors. Affected: OS X with SMB client; Impact: remote code exec...

CVE-2015-3773: Improper Restriction of Operations within the Bounds of a Memory Buffer

The SMB client in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via unspecified vectors...

WiFi HD 8.1 - Directory Traversal Denial of Service

WiFi HD 8.1 - Directory Traversal Denial of Service Exploit Title: WiFi HD 8.1 - Directory Traversal and Denial of Service Date: 2015-05-27 Exploit Author: Wh1t3Rh1n0 Michael Allen Vendor Homepage: http://www.savysoda.com Software Link: http://www.savysoda.com/WiFiHD/ Version: 8.1 Apr 1, 2015...

Windows 7/2008R2 SMB Client Trans2 Stack Overflow 10-020 PoC

No description provided by source...

Proof of Concept for MS10-006 SMB Client-Side Bug

No description provided by source. More Info: http://g-laurent.blogspot.com/2010/04/turning-smb-client-bug-to-server-side.html import sys,SocketServer,socket,threading,time,random from random import from time import sleep from socket import if lensys.argv=2: sys.exit'Usage: pwn.py Yourip...

Microsoft Windows NT <= 4.0 SP5,Terminal Server 4.0 "Pass the Hash" with Modified SMB Client Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/233/info A modified SMB client can mount shares on an SMB host by passing the username and corresponding LanMan hash of an account that is authorized to access the host and share. The modified SMB client removes the need...

Microsoft SMB Client Transaction Memory Corruption - Ver2 (CVE-2010-0270)

A memory corruption vulnerability has been reported in Microsoft Windows. The vulnerability is due to an error in the Microsoft SMB client implementation that fails to properly validate fields in the SMB response. Successful exploitation of this vulnerability could allow a remote attacker to...

Microsoft SMB Response Parsing Memory Corruption (MS10-020; CVE-2010-0476) - High Confidence

A remote code execution vulnerability has been reported in the Microsoft Windows Server Message Block SMB client implementation...

Microsoft SMB Client Response Parsing Code Execution (MS10-020; CVE-2010-0270)

A remote code execution vulnerability has been reported in the Microsoft Windows Server Message Block SMB client implementation...

CVE-2011-1268

The SMB client in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote SMB servers to execute arbitrary code via a crafted 1 SMBv1 or 2 SMBv2 response, aka "SMB Response Parsin...

Code injection

The SMB client in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote SMB servers to execute arbitrary code via a crafted 1 SMBv1 or 2 SMBv2 response, aka "SMB Response Parsin...

CVE-2011-1268: Improper Input Validation

The SMB client in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote SMB servers to execute arbitrary code via a crafted 1 SMBv1 or 2 SMBv2 response, aka "SMB Response Parsin...

Microsoft SMB Client Remote Code Execution Vulnerabilities (2536276)

This host is missing a critical security update according to Microsoft Bulletin MS11-043. OpenVAS Vulnerability Test $Id: secpodms11-043.nasl 5362 2017-02-20 12:46:39Z cfi $ Microsoft SMB Client Remote Code Execution Vulnerabilities 2536276 Authors: Veerendra GG Updated By: Antu Sanadi on...