OpenStack Cinder Exposure of Sensitive Information to an Unauthorized Actor vulnerability

The 1 GlusterFS and 2 Linux Smbfs drivers in OpenStack Cinder before 2014.1.3 allows remote authenticated users to obtain file data from the Cinder-volume host by cloning and attaching a volume with a crafted qcow2 header...

Samba Information Disclosure

The vulnerability of the Samba network file system is related to the incorrect definition of the link before accessing a file. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to confidential information by creating symbolic links...

Samba DoS

The vulnerability of the Samba network file system is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow an attacker to cause a service failure...

Samba Buffer Overflow DoS

The vulnerability of the Samba file system is related to reading data beyond the buffer boundaries. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality and integrity of the protected information...

Samba Path Traversal

The vulnerability of the Samba file system exists due to an incorrect limitation on the path name for the restricted access directory. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to files and directories beyond the boundaries of the SMB network...

Samba File System Access Bypass

The vulnerability of the samldbcheckuseraccountcontrolacl function in the Samba file system located in the samdb/ldbmodules/samldb.c file is related to improper privilege checking during the creation of computer accounts. Exploiting this vulnerability can allow a malicious actor to circumvent...

Samba Information Disclosure

The vulnerability of the internal DNS server of the Samba file system arises due to buffer overflow. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause a service failure reading beyond the memory limit or obtain confidential information by loading a specially...

Samba Access Control Modification

The vulnerability of the SMB1 component “smbd” of the Samba file system is related to access control deficiencies. Exploiting this vulnerability allows a malicious actor to modify arbitrary access control lists by using the UNIX SMB1 protocol to create symbolic links...

security flaw

smbfs in Linux kernel 2.6.8 and other versions, and 2.4.x before 2.4.34, when UNIX extensions are enabled, ignores certain mount options, which could cause clients to use server-specified uid, gid and mode settings...