169 matches found
sambaPoC.txt
Hi, The following is a brief proof of concept exploit code for the vulnerability mentioned in "Evgeny Demidov" 's advisory: Samba 3.x swat preauthentication buffer overflow Running the perl script against a vulnerable SWAT server will cause: Program received signal SIGSEGV, Segmentation fault...
Samba SWAT buffer overflow
Buffer overflow in Base64 decoding functions...
SWAT PreAuthorization PoC
Hi, The following is a brief proof of concept exploit code for the vulnerability mentioned in "Evgeny Demidov" [email protected]'s advisory: Samba 3.x swat preauthentication buffer overflow Running the perl script against a vulnerable SWAT server will cause: Program received signal SIGSEGV,...
Security Release - Samba 3.0.5 and 2.2.10
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Summary: Potential Buffer Overruns in Samba 3.0 and Samba 2.2 CVE ID: CAN-2004-0600, CAN-2004-0686 http://cve.mitre.org/ - ------------- CAN-2004-0600 - ------------- Affected Versions: = v3.0.2 The internal routine used by the Samba Web Administratio...
Samba <= 3.0.4 SWAT Authorization Buffer Overflow Exploit
Exploit for linux platform in category remote exploits ========================================================= Samba new Proto = "tcp", PeerAddr = $host, PeerPort = "901" ; unless $remote die "cannot connect to http daemon on $host" print "connected\n"; $remote-autoflush1; my $http = "GET /...
Samba 3.0.4 - SWAT Authorisation Buffer Overflow
!/usr/bin/perl Samba 3.0.4 and prior's SWAT Authorization Buffer Overflow Created by Noam Rathaus of Beyond Security Ltd. use IO::Socket; use strict; my $host = $ARGV0; my $remote = IO::Socket::INET-new Proto = "tcp", PeerAddr = $host, PeerPort = "901" ; unless $remote die "cannot connect to http...
Samba 3.0.4 - SWAT Authorisation Buffer Overflow
Samba 3.0.4 - SWAT Authorisation Buffer Overflow !/usr/bin/perl Samba 3.0.4 and prior's SWAT Authorization Buffer Overflow Created by Noam Rathaus of Beyond Security Ltd. use IO::Socket; use strict; my $host = $ARGV0; my $remote = IO::Socket::INET-new Proto = "tcp", PeerAddr = $host, PeerPort =...
RHEL 3 : samba (RHSA-2004:259)
Updated samba packages that fix buffer overflows, as well as other various bugs, are now available. Samba provides file and printer sharing services to SMB/CIFS clients. Evgeny Demidov discovered a flaw in the internal routine used by the Samba Web Administration Tool SWAT in Samba versions 3.0.2...
Samba SWAT HTTP Basic Auth base64 Overflow
The remote host is running SWAT - a web-based administration tool for Samba. There is a buffer overflow condition in the remote version of this software which might allow an attacker to execute arbitrary code on the remote host by sending a malformed authorization request or any malformed base64...
Potential Buffer Overrun in SWAT
Description The internal routine used by the Samba Web Administration Tool SWAT v3.0.2 and later to decode the base64 data during HTTP basic authentication is subject to a buffer overrun caused by an invalid base64 character. It is recommended that all Samba v3.0.2 or later installations running...
Multiple Potential Buffer Overruns in Samba
Evgeny Demidov discovered that the Samba server has a buffer overflow in the Samba Web Administration Tool SWAT on decoding Base64 data during HTTP Basic Authentication. Versions 3.0.2 through 3.0.4 are affected. Another buffer overflow bug has been found in the code used to support the "mangling...
CVE-2000-0935
CVE-2000-0935 affects Samba 2.0.7: the SWAT (Samba Web Administration Tool) CGI log file is vulnerable to a symlink attack that lets local users overwrite arbitrary files. This is a local-privilege context with complete impact on confidentiality and integrity as indicated by the CVSS metrics. Sup...
CVE-2000-0936
Samba SWAT in Samba 2.0.7 exposes the cgi.log file with world-readable permissions, enabling local users to read sensitive data (e.g., user names and passwords). Affected component: Samba Web Administration Tool (SWAT). Root cause: SWAT’s logging file is installed world-readable, leaking credenti...
CVE-2000-0937
The CVE concerns the Samba Web Administration Tool (SWAT) shipped with Samba 2.0.7, where login attempts that have a correct username but wrong password are not logged. This omission can enable brute-force password guessing by an attacker. Connected sources corroborate that SWAT in Samba 2.0.7 is...
CVE-2000-0938
Samba SWAT (Web Administration Tool) shipped with Samba 2.0.7 is vulnerable to username enumeration: SWAT returns different error messages for valid vs. invalid usernames, enabling remote attackers to identify valid users on the server. This is evidenced by multiple sources in the CVE ecosystem (...
CVE-2000-0937: Undefined Security Weakness
Samba Web Administration Tool SWAT in Samba 2.0.7 does not log login attempts in which the username is correct but the password is wrong, which allows remote attackers to conduct brute force password guessing attacks...
CVE-2000-0936: Undefined Security Weakness
Samba Web Administration Tool SWAT in Samba 2.0.7 installs the cgi.log logging file with world readable permissions, which allows local users to read sensitive information such as user names and passwords...
CVE-2000-0938: Undefined Security Weakness
Samba Web Administration Tool SWAT in Samba 2.0.7 supplies a different error message when a valid username is provided versus an invalid name, which allows remote attackers to identify valid users on the server...
CVE-2000-0939
CVE-2000-0939 affects Samba’s Web Administration Tool (SWAT) shipped with Samba 2.0.7. The issue allows a remote attacker over the network to trigger a denial-of-service by repeatedly sending a nonstandard URL in the GET HTTP request, forcing SWAT to restart. Connected sources corroborate SWAT ex...
Samba 2.0.7 - SWAT Logfile Permissions
source: https://www.securityfocus.com/bid/1874/info The Samba software suite is a collection of programs that implements the SMB protocol for unix systems, allowing you to serve files and printers to Windows, NT, OS/2 and DOS clients. This protocol is sometimes also referred to as the LanManager ...