57 matches found
CVE-2016-4341
NetApp Clustered Data ONTAP before 8.3.2P7 allows remote attackers to obtain SMB share information via unspecified vectors...
Microsoft Remote Desktop Session Host CVE-2015-2472 Spoofing Vulnerability
Description Microsoft Remote Desktop Session Host is prone to a security vulnerability that may allow attackers to conduct spoofing attacks. Attackers can exploit this issue to spoof and impersonate a legitimate user. Other attacks are also possible. Technologies Affected Microsoft SQL Server 200...
Microsoft Windows 'Netlogon' RPC CVE-2015-0005 Spoofing Vulnerability
Description Microsoft Windows is prone to a security vulnerability that may allow attackers to conduct spoofing attacks. Attackers can exploit this issue to spoof and impersonate a legitimate user. Other attacks are also possible. Technologies Affected Avaya CallPilot 4.0 Avaya CallPilot 4.0.1...
SMB : Disable the C$ and ADMIN$ shares after the scan (WMI)
Binary data wmidisableshares.nbin...
SMB : Enable the C$ and ADMIN$ shares during the scan (WMI)
Binary data wmienableshares.nbin...
MDaemon Mailer Daemon 11.0.1 File Disclosure
MDaemon Mailer Daemon Version 11.0.1 LATEST Remote File Disclosure Bug Found & Exploited by Kingcope May 2010 The latest version at the time of this advisory is vulnerble to the attack. It seems all files which the SYSTEM account can read can be accessed remotely, even accessing files on SMB shar...
Microsoft Windows SMB Shares Unprivileged Access
The remote host has one or more Windows shares that can be accessed through the network with the given credentials. Depending on the share rights, it may allow an attacker to read/write confidential data. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid42411;...
Apache 2.2.6 (Windows) - Share PHP File Extension Mapping Information Disclosure
source: https://www.securityfocus.com/bid/26939/info Apache is prone to an information-disclosure vulnerability. This issue occurs because Apache fails to properly associate file extensions with the correct engines when handling specially crafted requests for files on Windows SMB shares. Attacker...
SMB Shares File Enumeration (via WMI)
Binary data wmienumfiles.nbin...
FreeBSD : konqueror -- Password Disclosure for SMB Shares (4593cb09-4c81-11d9-983e-000c6e8f12ef)
When browsing SMB shares with Konqueror, shares with authentication show up with hidden password in the browser bar. It is possible to store the URL as a shortcut on the desktop where the password is then available in plain text. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptiv...
konqueror -- Password Disclosure for SMB Shares
When browsing SMB shares with Konqueror, shares with authentication show up with hidden password in the browser bar. It is possible to store the URL as a shortcut on the desktop where the password is then available in plain text...
Fedora Core 2 : cups-1.1.20-11.4 (2004-331)
This update fixes an information leakage problem when printing to SMB shares requiring authentication. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the name CVE-2004-0923 to this issue. Note that Tenable Network Security has extracted the preceding description block...
Microsoft Windows SMB Share Hosting Possibly Copyrighted Material
This plugin displays a list of media files such as .mp3, .ogg, .mpg, .avi which have been found on the remote SMB shares. Some of these files may contain copyrighted materials, such as commercial movies or music files, that are being shared without the owner's permission. If any of these files...
Microsoft Windows SMB Shares Enumeration
By connecting to the remote host, Nessus was able to enumerate the network share names. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10395; scriptversion"1.48"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/02/01"; scriptnameenglish:"Microsoft...
CVE-1999-0495
A remote attacker can gain access to a file system using .. dot dot when accessing SMB shares...
CVE-1999-0495
CVE-1999-0495 describes a remote path traversal vulnerability where an attacker can access a file system by using .. (dot dot) when interacting with SMB shares. The underlying cause is directory traversal over SMB, enabling disclosure or modification of sensitive data with complete impact on conf...
