8598 matches found
Command injection
SMB in Apple Mac OS X 10.3.9 through 10.4.9 does not properly clean the environment when executing commands, which allows local users to gain privileges by setting unspecified environment variables...
CVE-2007-0743
URLMount in Apple Mac OS X 10.3.9 through 10.4.9 passes the username and password credentials for mounting filesystems on SMB servers as command line arguments to the mountsub command, which may allow local users to obtain sensitive information by listing the process...
CVE-2007-0743
CVE-2007-0743 affects Apple Mac OS X 10.3.9–10.4.9, where URLMount passes SMB mount credentials (username/password) as command-line arguments to mount_sub, enabling local users to potentially view sensitive information by inspecting the process. The vulnerability is tied to how credentials are ex...
CVE-2007-0743
URLMount in Apple Mac OS X 10.3.9 through 10.4.9 passes the username and password credentials for mounting filesystems on SMB servers as command line arguments to the mountsub command, which may allow local users to obtain sensitive information by listing the process...
CVE-2007-0744
SMB in Apple Mac OS X 10.3.9 through 10.4.9 does not properly clean the environment when executing commands, which allows local users to gain privileges by setting unspecified environment variables...
CVE-2007-0744
CVE-2007-0744 affects Apple Mac OS X 10.3.9 through 10.4.9. The vulnerability arises from inadequate cleaning of the environment when executing commands, enabling local users to gain privileges by manipulating unspecified environment variables. The impact is local privilege escalation with comple...
UBUNTU-CVE-2007-1923
1 LedgerSMB and 2 DWS Systems SQL-Ledger implement access control lists by changing the set of URLs linked from menus, which allows remote attackers to access restricted functionality via direct requests. The LedgerSMB affected versions are before 1.3.0...
PT-2007-3268 · Dws Systems +2 · Sql-Ledger +2
Name of the Vulnerable Software and Affected Versions: LedgerSMB versions prior to 1.3.0 DWS Systems SQL-Ledger affected versions not specified Description: The issue allows remote attackers to access restricted functionality via direct requests, as access control lists are implemented by changin...
Snort 2.6.1 (Linux) - DCE/RPC Preprocessor Remote Buffer Overflow
!/usr/bin/python Remote exploit for Snort DCE/RPC preprocessor vulnerability as described in CVE-2006-5276. The exploit binds a shell to TCP port 4444 and connects to it. This code was tested against snort-2.6.1 running on Red Hat Linux 8 Author shall bear no responsibility for any screw ups caus...
Snort 2.6.1 (Linux) - DCERPC Preprocessor Remote Buffer Overflow
Snort 2.6.1 Linux - DCERPC Preprocessor Remote Buffer Overflow !/usr/bin/python Remote exploit for Snort DCE/RPC preprocessor vulnerability as described in CVE-2006-5276. The exploit binds a shell to TCP port 4444 and connects to it. This code was tested against snort-2.6.1 running on Red Hat Lin...
Zyxel Router Zynos SMB数据处理拒绝服务漏洞
Zyxel Router是一款ADSL路由器。 Zyxel Router不正确处理SMB报文，远程攻击者可以利用漏洞对设备进行拒绝服务攻击。 发送包含srSMBMailSlotname="\M"数据的报文，可导致设备崩溃，停止响应。 ZyXEL ZyNOS 3.40 目前没有详细解决方案提供： http://www.zyxel.com...
Design/Logic Flaw
ZynOS 3.40 allows remote attackers to cause a denial of service link restart by sending a request for the name \M via the SMB Mail Slot Protocol...
CVE-2007-1586
ZynOS 3.40 allows remote attackers to cause a denial of service link restart by sending a request for the name \M via the SMB Mail Slot Protocol...
CVE-2007-1586
ZynOS 3.40 allows remote attackers to cause a denial of service link restart by sending a request for the name \M via the SMB Mail Slot Protocol...
CVE-2007-1586
CVE-2007-1586 affects ZynOS 3.40. A remote attacker can trigger a denial of service (link restart) by sending a request for the name \M over the SMB Mail Slot Protocol. The NVD entry assigns a CVSS v2 base score of 7.8 (HIGH) with network access, low attack complexity, and availability impact. No...
Stack overflow
Stack-based buffer overflow in the Apple-specific Samba module SMB File Server in Apple Mac OS X 10.4 through 10.4.8 allows context-dependent attackers to execute arbitrary code via a long ACL...
CVE-2007-0731
Stack-based buffer overflow in the Apple-specific Samba module SMB File Server in Apple Mac OS X 10.4 through 10.4.8 allows context-dependent attackers to execute arbitrary code via a long ACL...
CVE-2007-0731
Stack-based buffer overflow in the Apple-specific Samba module SMB File Server in Apple Mac OS X 10.4 through 10.4.8 allows context-dependent attackers to execute arbitrary code via a long ACL...
CVE-2007-0731
CVE-2007-0731: A stack-based buffer overflow in the Apple-specific Samba module (SMB File Server) of Apple Mac OS X 10.4–10.4.8 allows context-dependent attackers to execute arbitrary code via a long ACL. The vulnerability affects the SMB File Server component bundled with Mac OS X; root cause is...
