CVE-2021-27185

The samba-client package before 4.0.0 for Node.js allows command injection because of the use of process.exec...

Node.js samba-client Command Command Injection Vulnerability

Node.js is an open source, cross-platform JavaScript runtime environment. A command injection vulnerability exists in samba-client for Node.js before version 4.0.0, which stems from the use of process.exec...

Huawei EulerOS: Security Advisory for samba (EulerOS-SA-2021-1229)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 6 : Storage Server (RHSA-2015:0257)

Updated samba packages that fix one security issue are now available for Red Hat Storage 2.1. Red Hat Product Security has rated this update as having Critical security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available from the CVE...

Huawei EulerOS: Security Advisory for cifs-utils (EulerOS-SA-2021-1183)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP5 : cifs-utils (EulerOS-SA-2021-1183)

According to the version of the cifs-utils package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - It was found that cifs-utils' mount.cifs was invoking a shell when requesting the Samba password, which could be used to inject arbitrary...

EulerOS 2.0 SP5 : samba (EulerOS-SA-2021-1229)

According to the versions of the samba packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in the way samba handled file and directory permissions. An authenticated user could use this flaw to gain access to certain fil...

Apple NetFSFramework Code Issue Vulnerability

Apple NetFSFramework is a component of Apple Inc. that is used in Apple devices to support the network file system. A code issue exists in Apple NetFSFramework, which is a vulnerability that arises from an application not properly applying security restrictions within the NetFSFramework component...

Huawei EulerOS: Security Advisory for samba (EulerOS-SA-2021-1171)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS 8 : samba (CESA-2020:1878)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:1878 advisory. - samba: Combination of parameters and permissions can allow user to escape from the share path definition CVE-2019-10197 - samba: smb client vulnerabl...

CentOS 8 : libldb (CESA-2020:4568)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4568 advisory. - samba: NULL pointer de-reference and use-after-free in Samba AD DC LDAP Server with ASQ, VLV and pagedresults CVE-2020-10730 Note that Nessus has not tested f...

NewStart CGSL CORE 5.05 / MAIN 5.05 : samba Multiple Vulnerabilities (NS-SA-2020-0106)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has samba packages installed that are affected by multiple vulnerabilities: - A flaw was found in samba versions 4.9.x up to 4.9.13, samba 4.10.x up to 4.10.8 and samba 4.11.x up to 4.11.0rc3, when certain parameters were set i...

EulerOS 2.0 SP8 : samba (EulerOS-SA-2021-1171)

According to the version of the samba packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A flaw was found in samba's DNS server. An authenticated user could use this flaw to the RPC server to crash. This RPC server, which also serves...

Security Bulletin: Multiple vulnerabilities in samba affect IBM Spectrum Scale SMB protocol access method.

Summary Multiple samba vulnerabilities affect IBM Spectrum Scale SMB protocol access method that could cause denial of service. A fix for these vulnerabilities is available. Vulnerability Details CVEID: CVE-2020-14318 DESCRIPTION: Samba could allow a remote authenticated attacker to obtain...

SUSE-SU-2021:0185-1 Security update for samba

This update for samba fixes the following issues: - Update to 4.13.3 + libcli: smb2: Never print length if smb2signingkeyvalid fails for crypto blob; bso14210; + s3: modules: gluster. Fix the error I made in preventing talloc leaks from a function; bso14486; + s3: smbd: Don't overwrite contents o...

[SECURITY] Fedora 33 Update: libntlm-1.6-1.fc33

A library for authenticating with Microsoft NTLMV1 challenge-response, derived from Samba sources...

Fedora: Security Advisory for libntlm (FEDORA-2020-8794383d6f)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

EulerOS 2.0 SP3 : cifs-utils (EulerOS-SA-2021-1061)

According to the version of the cifs-utils package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - It was found that cifs-utils' mount.cifs was invoking a shell when requesting the Samba password, which could be used to inject arbitrary...

EulerOS 2.0 SP3 : samba (EulerOS-SA-2021-1118)

According to the versions of the samba packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in samba's DNS server. An authenticated user could use this flaw to the RPC server to crash. This RPC server, which also serves...

Huawei EulerOS: Security Advisory for cifs-utils (EulerOS-SA-2021-1061)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...