Samba SWAT HTTP Authentication Buffer Overflow (CVE-2004-0600)

Samba is an open-source implementation of the file, print, and other network services suite known as SMB/CIFS Server Message Block/Common Internet File System. SWAT is a web-based administrative tool that allows an administrator to edit and view a Samba configuration. SWAT commonly listens on por...

FreeBSD : Multiple Potential Buffer Overruns in Samba (2de14f7a-dad9-11d8-b59a-00061bc2ad93)

Evgeny Demidov discovered that the Samba server has a buffer overflow in the Samba Web Administration Tool SWAT on decoding Base64 data during HTTP Basic Authentication. Versions 3.0.2 through 3.0.4 are affected. Another buffer overflow bug has been found in the code used to support the 'mangling...

Mandriva Update for samba MDKA-2007:001 (samba)

Check for the Version of samba OpenVAS Vulnerability Test Mandriva Update for samba MDKA-2007:001 samba Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Null pointer dereference

SWAT 4 1.1 and earlier allows remote attackers to cause a denial of service daemon crash via a 1 VERIFYCONTENT or 2 GAMECONFIG command sent to the server before user session initialization, which triggers a NULL pointer dereference; or 3 a GAMESPYRESPONSE command followed by a long RS string...

CVE-2008-3286

SWAT 4 1.1 and earlier allows remote attackers to cause a denial of service daemon crash via a 1 VERIFYCONTENT or 2 GAMECONFIG command sent to the server before user session initialization, which triggers a NULL pointer dereference; or 3 a GAMESPYRESPONSE command followed by a long RS string...

CVE-2008-3286

SWAT 4 1.1 and earlier allows remote attackers to cause a denial of service daemon crash via a 1 VERIFYCONTENT or 2 GAMECONFIG command sent to the server before user session initialization, which triggers a NULL pointer dereference; or 3 a GAMESPYRESPONSE command followed by a long RS string...

CVE-2008-3286

CVE-2008-3286 affects SWAT 4 (version 1.1 and earlier). The issue is a remote denial of service caused by specific commands (VERIFYCONTENT, GAMECONFIG) sent to the server before user session initialization, triggering a NULL pointer dereference, or by a GAMESPYRESPONSE command followed by a long ...

CVE-2008-3286: Improper Input Validation

SWAT 4 1.1 and earlier allows remote attackers to cause a denial of service daemon crash via a 1 VERIFYCONTENT or 2 GAMECONFIG command sent to the server before user session initialization, which triggers a NULL pointer dereference; or 3 a GAMESPYRESPONSE command followed by a long RS string...

SWAT 4 - Multiple Denial of Service Vulnerabilities

// source: https://www.securityfocus.com/bid/30299/info SWAT 4 is prone to multiple remote denial-of-service vulnerabilities because the application fails to properly handle certain input. An attacker may exploit these issues to crash the affected application, denying service to legitimate users...

joovili-rfi.txt

Bulan : Cr@zyKing Thanks : DreamTurk & CrackersChild & Eno7 & TheBekir & Pablin77 & Byond Crew & sys7ech Script : Joovili Versiyon : v2.1 Google Dork : © Powered by Joovili v.2.1 Risk : Remote File İnclude Error : include $hlp."include/settings.inc.php"; include $hlp."include/replace.inc.php";...

Fedora Core 6 : samba-3.0.24-8.fc6 (2007-751)

Thu Nov 15 2007 Simo Sorce 3.0.24-8.fc6 - Fix CVE-2007-4572 - Fix CVE-2007-5398 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora 8 : samba-3.0.27-0.fc8 (2007-3403)

Security Fixes : - CVE-2007-4572 - CVE-2007-5398 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Detect SWAT server port

SWAT Samba Web Administration Tool is running on this port. SWAT allows Samba users to change their passwords, and offers to the sysadmin an easy-to-use GUI to configure Samba. However, it is not recommended to let SWAT be accessed by the world, as it allows an intruder to attempt to brute force...

Samba Web Administration Tool SWAT Detection (HTTP)

HTTP based detection of the Samba Web Administration Tool SWAT. SPDX-FileCopyrightText: 2005 SecuriTeam Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GLSA-200407-21 : Samba: Multiple buffer overflows

The remote host is affected by the vulnerability described in GLSA-200407-21 Samba: Multiple buffer overflows Evgeny Demidov found a buffer overflow in SWAT, located in the base64 data decoder used to handle HTTP basic authentication CAN-2004-0600. The same flaw is present in the code used to...

SWAT Server Detection

Binary data 1470.prm...

Samba: Multiple buffer overflows

Background Samba is a package which allows nix systems to act as file servers for Windows computers. It also allows nix systems to mount shares exported by a Samba/CIFS/Windows server. The Samba Web Administration Tool SWAT is a web-based configuration tool part of the Samba package. Description...

DEBIAN-CVE-2004-0600

Buffer overflow in the Samba Web Administration Tool SWAT in Samba 3.0.2 to 3.0.4 allows remote attackers to execute arbitrary code via an invalid base-64 character during HTTP basic authentication...

SUSE-SA:2004:022: samba

The remote host is missing the patch for the advisory SUSE-SA:2004:022 samba. The Samba Web Administration Tool SWAT was found vulnerable to a buffer overflow in its base64 code. This buffer overflow can possibly be exploited remotely before any authentication took place to execute arbitrary code...

CVE-2004-0600

CVE-2004-0600 affects Samba SWAT (the Web Administration Tool) used with Samba 3.0.2–3.0.4. The vulnerability arises from a flaw in HTTP basic authentication base64 decoding, leading to a heap-based buffer overflow that can allow remote code execution or a denial of service. Public references (Sa...