Lucene search
K

8 matches found

OpenVAS
OpenVAS
added 2021/09/24 12:0 a.m.18 views

Samba 2.0.0 <= 3.0.9 Vulnerability (CVE-2004-1154)

Integer overflow could lead to remote code execution RCE. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:samba:samba";...

10CVSS7.3AI score0.13196EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2008/09/06 12:0 a.m.35 views

Samba 3.0.0 > 3.0.29 vulnerability

The remote host is probably affected by the vulnerabilities described in CVE-2008-1105 Samba 3.0.29 vulnerability Authors: Carsten Koch-Mauthe Copyright: Copyright C 2008 Greenbone Networks GmbH This program is free software; you can redistribute it and/or modify it under the terms of the GNU...

7.5CVSS1.3AI score0.69085EPSS
Exploits2
NVD
NVD
added 2007/12/13 9:46 p.m.32 views

CVE-2007-6015

Stack-based buffer overflow in the sendmailslot function in nmbd in Samba 3.0.0 through 3.0.27a, when the "domain logons" option is enabled, allows remote attackers to execute arbitrary code via a GETDC mailslot request composed of a long GETDC string following an offset username in a SAMLOGON...

9.3CVSS7.8AI score0.27482EPSS
Exploits1References57
seebug.org
seebug.org
added 2007/11/17 12:0 a.m.86 views

Samba NMBD登录请求远程溢出漏洞

BUGTRAQ ID: 26454 CVECAN ID: CVE-2007-4572 Samba是一套实现SMB(Server Messages Block)协议、跨平台进行文件共享和打印共享服务的程序。 Samba的nmbd在处理GETDC登录服务器请求时存在缓冲器溢出漏洞,可能导致非预期的服务器行为。 如果远程攻击者发送了畸形的GETDC请求的话就可以触发这个漏洞,但无法利用这个溢出执行任意指令,在大多数情况下也不会导致Samba服务器崩溃。仅在将Samba服务器配置为主或备份域控制器时才会出现这个漏洞。 Samba 3.0.0 - 3.0.26a 临时解决方法:...

9.3CVSS8.5AI score0.05888EPSS
Exploits1
securityvulns
securityvulns
added 2007/05/16 12:0 a.m.54 views

ZDI-07-031: Samba smb_io_notify_option_type_data Heap Overflow Vulnerability

ZDI-07-031: Samba smbionotifyoptiontypedata Heap Overflow Vuln http://www.zerodayinitiative.com/advisories/ZDI-07-031.html May 15, 2007 -- CVE ID: CVE-2007-2446 -- Affected Vendor: Samba -- Affected Products: Samba 3.0.0 - 3.0.25rc3 -- TippingPointTM IPS Customer Protection: TippingPoint IPS...

10CVSS0.3AI score0.77806EPSS
Exploits23
securityvulns
securityvulns
added 2007/05/15 12:0 a.m.291 views

[SAMBA-SECURITY] CVE-2007-2447: Remote Command Injection Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ========================================================== == == Subject: Remote Command Injection Vulnerability == CVE ID: CVE-2007-2447 == == Versions: Samba 3.0.0 - 3.0.25rc3 inclusive == == Summary: Unescaped user input parameters are passed == as...

6CVSS0.8AI score0.49759EPSS
Exploits15
Prion
Prion
added 2007/05/14 9:19 p.m.22 views

Heap overflow

Multiple heap-based buffer overflows in the NDR parsing in smbd in Samba 3.0.0 through 3.0.25rc3 allow remote attackers to execute arbitrary code via crafted MS-RPC requests involving 1 DFSEnum netdfsiodfsEnumInfod, 2 RFNPCNEX smbionotifyoptiontypedata, 3 LsarAddPrivilegesToAccount...

10CVSS7.7AI score0.77806EPSS
Exploits23References75Affected Software1
Positive Technologies
Positive Technologies
added 2004/07/23 12:0 a.m.8 views

PT-2004-1772 · Samba +1 · Samba +1

Name of the Vulnerable Software and Affected Versions: Samba versions 2.2.x through 2.2.9 Samba versions 3.0.0 through 3.0.4 Description: A buffer overflow issue exists when the mangling method = hash option is enabled in smb.conf. The impact and attack vectors of this issue are not specified. Th...

7.5CVSS6.5AI score0.06706EPSS
Exploits0References26
Rows per page
Query Builder