28 matches found
Code injection
Clustered Data ONTAP versions prior to 9.3P21, 9.5P16, 9.6P12, 9.7P9 and 9.8 are susceptible to a vulnerability which could allow a remote authenticated attacker to cause a Denial of Service DoS on clustered Data ONTAP configured for SMB access...
CVE-2021-26989
CVE-2021-26989 affects NetApp Clustered Data ONTAP versions prior to 9.3P21, 9.5P16, 9.6P12, 9.7P9 and 9.8. A remote authenticated attacker could cause a Denial of Service in clustered Data ONTAP configured for SMB access. Connected sources reiterate impacted versions and DoS impact; some advisor...
curl: curl still vulnerable to SMB access smuggling via FILE URL on Windows
Summary: The released fix for CVE-2019-15601, SMB access smuggling via FILE URL on Windows, leaves curl still vulnerable to SMB access smuggling via FILE URLs. - FILE URLs formatted as file:////smbserver/smbshare/file are not filtered. - FILE URLs which point to the global DOS name space, ??, and...
curl: SMB access smuggling via FILE URL on Windows
Summary: While CURL 7.62 parses URLs that have an ? parameter separator char after the fragment separator, CURL urlapi code treats the path with the hash part as it being the same one, this may allow some problem on specific protocols that may have a security impact. On HTTP, an attacker may be...
Oracle Job Scheduler Named Pipe Command Execution
This module exploits the Oracle Job Scheduler to execute arbitrary commands. The Job Scheduler is implemented via the component extjob.exe which listens on a named pipe called "orcljsex" and execute arbitrary commands received over this channel via CreateProcess. In order to connect to the Named...
iomega Home Media Network Hard Drive unauthorized access
Web interface allows SMB access to device and network it's connected to...
CVE-2006-6467
Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 do not properly restrict access to SMB file resources, which allows remote attackers to gain unspecified file or directory access via vectors related to 1 visibility of the SMB "Home...
