342 matches found
CVE-2007-2407
The Samba server on Apple Mac OS X 10.3.9 and 10.4.10, when Windows file sharing is enabled, does not enforce disk quotas after dropping privileges, which allows remote authenticated users to use disk space in excess of quota...
CVE-2007-4044
Rejected reason: The MS-RPC functionality in smbd in Samba 3 on SUSE Linux before 20070720 does not include "one character in the shell escape handling." NOTE: this issue was originally characterized as a shell metacharacter issue due to an incomplete fix for CVE-2007-2447, which was interpreted ...
Samba Server Detection
The remote host is running Samba, a CIFS/SMB server for Linux and Unix. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid25240; scriptversion"1.15"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/10/12"; scriptnameenglish:"Samba Server Detection";...
Samba < 3.0.25 Multiple Vulnerabilities
According to its banner, the version of the Samba server installed on the remote host is affected by multiple buffer overflow and remote command injection vulnerabilities, which can be exploited remotely, as well as a local privilege escalation bug. C Tenable Network Security, Inc...
security flaw
smbd in Samba 3.0.6 through 3.0.23d allows remote authenticated users to cause a denial of service memory and CPU exhaustion by renaming a file in a way that prevents a request from being removed from the deferred open queue, which triggers an infinite loop...
Samba < 3.0.24 Multiple Flaws
According to its version number, the remote Samba server is affected by several flaws : - A denial of service issue occuring if an authenticated attacker sends a large number of CIFS session requests which will cause an infinite loop to occur in the smbd daemon, thus utilizing CPU resources and...
security flaw
The smdb daemon smbd/service.c in Samba 3.0.1 through 3.0.22 allows remote attackers to cause a denial of service memory consumption via a large number of share connection requests...
In RedHat 9 on the overflow to obtain root demo-vulnerability warning-the black bar safety net
From recently to be black Server security analysis point of view, I find the user elevated permissions tool. He is using a Samba security vulnerability upgrade in order to ROOT. These days the server because you want to put to the public test, this time also installed a Samba server. The results ...
Ubuntu 4.10 : linux-source-2.6.8.1 vulnerabilities (USN-30-1)
CAN-2004-0883, CAN-2004-0949 : During an audit of the smb file system implementation within Linux, several vulnerabilities were discovered ranging from out of bounds read accesses to kernel level buffer overflows. To exploit any of these vulnerabilities, an attacker needs control over the answers...
FreeBSD : samba -- integer overflow vulnerability (3b3676be-52e1-11d9-a9e7-0001020eed82)
Greg MacManus, iDEFENSE Labs reports : Remote exploitation of an integer overflow vulnerability in the smbd daemon included in Samba 2.0.x, Samba 2.2.x, and Samba 3.0.x prior to and including 3.0.9 could allow an attacker to cause controllable heap corruption, leading to execution of arbitrary...
DEBIAN-CVE-2004-1154
Integer overflow in the Samba daemon smbd in Samba 2.x and 3.0.x through 3.0.9 allows remote authenticated users to cause a denial of service application crash and possibly execute arbitrary code via a Samba request with a large number of security descriptors that triggers a heap-based buffer...
DEBIAN-CVE-2004-0808
The processlogonpacket function in the nmbd server for Samba 3.0.6 and earlier, when domain logons are enabled, allows remote attackers to cause a denial of service via a SAMUASCHANGE request with a length value that is larger than the number of structures that are provided...
Samba smbd Security Descriptor Parsing Remote Overflow
The remote Samba server, according to its version number, is vulnerable to a remote buffer overrun resulting from an integer overflow vulnerability. To exploit this flaw, an attacker would need to send to the remote host a malformed packet containing hundreds of thousands of ACLs, which would in...
USN-30-1: Linux kernel vulnerabilities
CAN-2004-0883, CAN-2004-0949: During an audit of the smb file system implementation within Linux, several vulnerabilities were discovered ranging from out of bounds read accesses to kernel level buffer overflows. To exploit any of these vulnerabilities, an attacker needs control over the answers ...
SUSE-SA:2004:035: samba
The remote host is missing the patch for the advisory SUSE-SA:2004:035 samba. The Samba server, which allows to share files and resources via the SMB/CIFS protocol, contains a bug in the sanitation code of path names which allows remote attackers to access files outside of the defined share. In...
Mandrake Linux Security Advisory : samba (MDKSA-2003:044)
An exploitable buffer overflow was discovered in the Samba server that can lead to an anonymous remote root compromise. The Samba Team also discovered some potential overflows during an internal code audit which was done in response to the previously noted buffer overflow problem. All versions of...
Samba Mangling Method Hash Overflow
The remote Samba server, according to its version number, is vulnerable to a buffer overflow if the option 'mangling method' is set to 'hash' in smb.conf which is not the case by default. An attacker may exploit this flaw to execute arbitrary commands on the remote host. C Tenable Network Securit...
Multiple Potential Buffer Overruns in Samba
Evgeny Demidov discovered that the Samba server has a buffer overflow in the Samba Web Administration Tool SWAT on decoding Base64 data during HTTP Basic Authentication. Versions 3.0.2 through 3.0.4 are affected. Another buffer overflow bug has been found in the code used to support the "mangling...
[Full-Disclosure] Microsoft's Explorer and Internet Explorer long share name buffer overflow.
Microsoft Explorer and Internet Explorer Long Share Name Buffer Overflow. Author: Rodrigo Gutierrez [email protected] Affected: MS Internet Explorer, MS Explorer explorer.exe Windows XPAll, Windows 2000All, Windows 98All, Windows meAll Not Tested: Windows 2003 Vendor Status: i notified the...
Sharp Zaurus SL-5500 upgrade ROM v3.1 - serious Samba issue
The Sharp Zaurus is a linux-based PDA running Embedix. In the May version of the Sharp Zaurus newsletter, version 3.1 of the flash ROM was announced with various new versions of software and added OS functionality. The linux kernel went from 2.4.6 to 2.4.18. The Zaurus docking station comes with ...