CVE-2018-16451

The SMB parser in tcpdump before 4.9.3 has buffer over-reads in print-smb.c:printtrans for \MAILSLOT\BROWSE and \PIPE\LANMAN...

CVE-2018-10105

tcpdump before 4.9.3 mishandles the printing of SMB data issue 2 of 2...

CVE-2018-10105

CVE-2018-10105 affects the tcpdump utility. Affected: tcpdump before 4.9.3 with a flaw in printing SMB data, leading to potential memory impact (reported as high/critical in CVSS terms). Root cause: mishandling of SMB data during printing. Public details in connected sources (e.g., AlmaLinux ALSA...

CVE-2018-10105

tcpdump before 4.9.3 mishandles the printing of SMB data issue 2 of 2...

CVE-2018-10105

tcpdump before 4.9.3 mishandles the printing of SMB data issue 2 of 2...

CVE-2018-10103

tcpdump before 4.9.3 is affected by CVE-2018-10103 (SMB data printing mishandling). The issue is fixed in tcpdump 4.9.3 and later; remediation is to upgrade to 4.9.3 or newer. Public advisories (Debian DSA-4547-1, DLA-1955-1) confirm the fix in 4.9.3-1~deb9u1/4.9.3-1~deb10u1; AlmaLinux advisory A...

CVE-2018-10103

tcpdump before 4.9.3 mishandles the printing of SMB data issue 1 of 2...

CVE-2018-10103

tcpdump before 4.9.3 mishandles the printing of SMB data issue 1 of 2...

Most SMB cybersecurity defence fail short to thwart malware & file-based attacks

By Waqas Cybersecurity threats have come a long way from the viruses of decades ago. What's alarming is that hackers now have a multitude of tools, methods, and technologies to help them carry out attacks. This is a post from HackRead.com Read the original post: Most SMB cybersecurity defence fai...

How SMBs Can Mitigate the Growing Risk of File-based Attacks

Cases of document-based malware are steadily rising. 59 percent of all malicious files detected in the first quarter of 2019 were contained in documents. Due to how work is done in today's offices and workplaces, companies are among those commonly affected by file-based attacks. Since small to...

DOUBLEPULSAR - Payload Execution and Neutralization (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'DOUBLEPULSAR Payload Execution and Neutralization', 'Description' = %q This module executes a Metasploit payload against the Equation Group's...

DOUBLEPULSAR Payload Execution / Neutralization

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'DOUBLEPULSAR Payload Execution and Neutralization', 'Description' = %q This module executes a Metasploit payload against the Equation Group's...

DOUBLEPULSAR Payload Execution and Neutralization

This module executes a Metasploit payload against the Equation Group's DOUBLEPULSAR implant for SMB as popularly deployed by ETERNALBLUE. While this module primarily performs code execution against the implant, the "Neutralize implant" target allows you to disable the implant...

UBUNTU-CVE-2018-16451

The SMB parser in tcpdump before 4.9.3 has buffer over-reads in print-smb.c:printtrans for \MAILSLOT\BROWSE and \PIPE\LANMAN...

CVE-2018-16452

The SMB parser in tcpdump before 4.9.3 has stack exhaustion in smbutil.c:smbfdata via recursion...

CVE-2018-10103

tcpdump before 4.9.3 mishandles the printing of SMB data issue 1 of 2...

CVE-2018-10105

tcpdump before 4.9.3 mishandles the printing of SMB data issue 2 of 2...

CVE-2019-11899

An unauthenticated attacker can achieve unauthorized access to sensitive data by exploiting Windows SMB protocol on a client installation. With Bosch Access Professional Edition APE 3.8, client installations need to be authorized by the APE administrator...

Information disclosure

An unauthenticated attacker can achieve unauthorized access to sensitive data by exploiting Windows SMB protocol on a client installation. With Bosch Access Professional Edition APE 3.8, client installations need to be authorized by the APE administrator...

CVE-2019-11899

CVE-2019-11899 describes an unauthenticated exposure where an attacker can gain unauthorized access to sensitive data by exploiting the Windows SMB protocol on a Bosch Access Professional Edition (APE) 3.8 client installation. The issue affects how client installations are authorized by the APE a...