USN-3895-1 ldb vulnerability

It was discovered that LDB incorrectly handled certain search expressions. A remote attacker could possibly use this issue to cause the Samba LDAP process to crash, resulting in a denial of service...

USN-3895-1: LDB vulnerability

It was discovered that LDB incorrectly handled certain search expressions. A remote attacker could possibly use this issue to cause the Samba LDAP process to crash, resulting in a denial of service...

CVE-2019-3824

A flaw was found in the way an LDAP search expression could crash the shared LDAP server process of a samba AD DC in samba before version 4.10. An authenticated user, having read permissions on the LDAP server, could use this flaw to cause denial of service...

UBUNTU-CVE-2019-3824

A flaw was found in the way an LDAP search expression could crash the shared LDAP server process of a samba AD DC in samba before version 4.10. An authenticated user, having read permissions on the LDAP server, could use this flaw to cause denial of service...

Samba LDAP AD DC Privilege Escalation (CVE-2018-1057)

A privilege escalation vulnerability has been reported in the Samba. A remote attacker could exploit this vulnerability by sending crafted LDAP requests to the vulnerable service. Successful exploitation allows authenticated attackers to change other users passwords, including administrative user...

mIRC Remote Command Execution

Exploit Title: RCE on mIRC 7.55 using argument injection through custom URI protocol handlers Date: 18/02/2019 Exploit Author: https://twitter.com/proofofcalc/ Vendor Homepage: https://www.mirc.com Software Link: https://www.mirc.com/get.php Version: 7.55 Tested on: Windows CVE : CVE-2019-6453 RC...

mIRC < 7.55 - Remote Command Execution Using Argument Injection Through Custom URI Vulnerability

Exploit Title: RCE on mIRC 7.55 using argument injection through custom URI protocol handlers Date: 18/02/2019 Exploit Author: https://twitter.com/proofofcalc/ Vendor Homepage: https://www.mirc.com Software Link: https://www.mirc.com/get.php Version: 7.55 Tested on: Windows CVE : CVE-2019-6453 RC...

mIRC 7.55 - Custom URI Protocol Handlers Remote Command Execution

mIRC 7.55 - Custom URI Protocol Handlers Remote Command Execution Exploit Title: RCE on mIRC 7.55 using argument injection through custom URI protocol handlers Date: 18/02/2019 Exploit Author: https://twitter.com/proofofcalc/ Vendor Homepage: https://www.mirc.com Software Link:...

WECON LeviStudioU Detection (Windows SMB Login)

SMB login-based detection of WECON LeviStudioU. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Samba < 3.4.0 Remote Code Execution Vulnerability

The version of Samba running on the remote host is prior to 3.4.0. It is, therefore, affected by a remote code execution vulnerability in process.c due to a heap-based buffer overflow. An unauthenticated, remote attacker can exploit this to bypass authentication and execute arbitrary commands via...

Samba < 2.2.8a Remote Code Execution Vulnerability

The version of Samba running on the remote host is prior to 2.2.8a. It is, therefore, affected by a remote code execution vulnerability in the SMB/CIFS packet fragment re-assembly code in smbd. An unauthenticated, remote attacker can exploit this to inject binary specific exploit code into smbd a...

Samba 3.2.x < 3.2.3 Privilege Escalation Vulnerability

The version of Samba running on the remote host is prior to 3.2.3. It is, therefore, affected by a privilege escalation vulnerability. An unauthenticated, remote attacker can exploit this to gain privileged or administrator access to the system. Note that Nessus has not tested for this issue but...

The vulnerability of Samba software on the Astra Linux operating system, which allows a hacker to trigger a service failure.

The vulnerability of Samba software on the Astra Linux operating system is related to the absence of the necessary privilege PARSECCAPSIG for the smbd process. Exploiting this vulnerability can allow a malicious actor to cause service interruptions. source-iocs-preserved const=PARSECCAPSIG...

Amazon Linux AMI : samba (ALAS-2018-1126)

A NULL pointer dereference flaw was found in Samba RPC external printer service. An attacker could use this flaw to cause the printer spooler service to crash. CVE-2018-1050 A heap-buffer overflow was found in the way samba clients processed extra long filename in a directory listing. A malicious...

The vulnerability of the Samba networking communication software package lies in the absence of SMB traffic signatures, which allows attackers to execute a “man-in-the-middle” attack.

The vulnerability of the Samba networking communication package is related to the absence of SMB traffic signatures. Exploiting this vulnerability allows a remote attacker to execute a “man-in-the-middle” attack and obtain protected information in text form...

The vulnerability of the Samba networking communication software lies in the lack of requirements for signing and encrypting SMB traffic when using DFS redirection. This allows a attacker to execute a “man-in-the-middle” attack.

The vulnerability of the Samba networking communication package is related to the lack of requirements for signing and encrypting SMB traffic when using DFS redirection. Exploiting this vulnerability allows a remote attacker to execute a “man-in-the-middle” attack and gain access to read and modi...

Medium: samba

Issue Overview: A null pointer dereference flaw was found in Samba RPC external printer service. An attacker could use this flaw to cause the printer spooler service to crash. CVE-2018-1050 A heap-buffer overflow was found in the way samba clients processed extra long filename in a directory...

Denial Of Service (DoS)

samba is vulnerable to denial of service DoS attacks. The vulnerability exists as all versions of Samba from 4.0.0 onwards are vulnerable to a denial of service attack when the RPC spoolss service is configured to be run as an external daemon. Missing input sanitization checks on some of the inpu...

Man-in-the-Middle (MitM)

samba is vulnerable to man-in-the-middle MitM attacks. The vulnerability exists as it was found that samba before 4.4.16, 4.5.x before 4.5.14, and 4.6.x before 4.6.8 did not enforce "SMB signing" when certain configuration options were enabled. A remote attacker could launch a man-in-the-middle...

Arbitrary Code Execution

samba is vulnerable to arbitrary code execution. A use-after-free flaw was found in the way samba servers handled certain SMB1 requests. An unauthenticated attacker could send specially-crafted SMB1 requests to cause the server to crash or execute arbitrary code...