11562 matches found
samba -- client side SMB2/3 required signing can be downgraded
Samba team reports: A man in the middle attack can disable client signing over SMB2/3, even if enforced by configuration parameters...
Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information
The Samba-dbg package in the Debian GNU/Linux operating system has multiple vulnerabilities. Exploitation of these vulnerabilities can lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited by malicious individuals who ha...
The vulnerability of the _netr_ServerPasswordSet function in the Samba networking communication software package allows a hacker to execute arbitrary code with administrator privileges.
The vulnerability of the netrServerPasswordSet function in the Samba networking software package is related to code errors. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code with administrator privileges using a specially crafted call to the...
The vulnerability of Samba software allows a malicious individual to compromise the confidentiality, integrity, and accessibility of protected information.
Overfilling of buffers in dynamic memory in the dcerpcreadncacnpacketdone function in librpc/rpc/dcerpcutil.c in winbindd in Samba allows remote domain controllers to execute arbitrary code, by using an invalid fragment length in the DCE-RPC packet...
The vulnerability of Samba software allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability exists in Samba when operating as an Active Directory domain controller due to the fact that all users have permission to write to non-standard CIFS network resources. Exploiting this vulnerability allows remote users who have been authenticated to view, modify, create, and dele...
Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality of protected information
Multiple vulnerabilities in the Samba package of the Debian GNU/Linux operating system; exploiting these vulnerabilities can lead to breaches of the confidentiality of protected information. These vulnerabilities can be exploited by malicious individuals who have completed the authentication...
The vulnerability of Samba software allows a malicious individual to compromise the accessibility of protected information.
The vulnerability in the pushascii function of Samba’s smbd allows remote users who have completed authentication to trigger a service failure—a memory-related error and an unexpected termination of the daemon—by attempting to read the path name in Unicode format without using Unicode. This leads...
The vulnerability of Samba software allows a remote attacker to compromise the confidentiality and integrity of protected information.
A vulnerability exists in the ownerset function in smbcacls.c within smbcacls in Samba, due to the deletion of the access control list when the --chown or --chgrp parameter is used. Exploiting this vulnerability allows malicious actors to circumvent access restrictions by making unauthorized...
The vulnerability of Samba software allows a remote attacker to compromise the confidentiality and integrity of protected information.
A vulnerability exists in the winbindnamelisttosidstringlist function in nsswitch/pamwinbind.c of Samba, due to the handling of incorrect group names like requiremembershipof. This allows authentication for any user. Exploiting this vulnerability enables remote users to circumvent access...
The vulnerability of Samba software allows a remote attacker to compromise the confidentiality of protected information.
The vulnerability exists in Samba due to the lack of protection against password retrieval for all interfaces. Exploiting this vulnerability allows malicious actors, operating remotely, to gain access to the system by retrieving the password during a ChangePasswordUser2 SAMR or RAP attempt...
Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information
The multiple vulnerabilities in the samba-doc package of the Debian GNU/Linux operating system can be exploited, leading to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited by malicious individuals who have completed th...
The vulnerability of Samba software allows a remote attacker to compromise the confidentiality of protected information.
The vulnerability exists in Samba under certain settings of shadow copying vfs. It stems from an improper initialization of the SRVSNAPSHOTARRAY field. Exploiting this vulnerability allows remote users who have passed authentication to access confidential information from the process’s memory,...
The vulnerability of Samba software allows a malicious individual to compromise the accessibility of protected information.
The vulnerability in the sysrecvfrom function of nmbd in Samba allows malicious actors operating remotely to cause service interruptions lockup and excessive processor resource consumption by using improperly formed UDP packets...
The vulnerability of Samba software allows a malicious individual to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability in the NetBIOS name service daemon nmbd of Samba allows malicious actors to execute arbitrary code by manipulating dynamic memory using the sizeof operation, with respect to an incorrect variable in the unstrcpy macro in stringwrappers.h...
Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information
The multiple vulnerabilities in the Samba-common package of the Debian GNU/Linux operating system can be exploited, leading to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited by malicious individuals who have completed...
The vulnerability of Samba software allows a remote attacker to compromise the accessibility of protected information.
The vulnerability exists in the internal Samba DNS server due to the lack of checking the QR field in the header of the incoming DNS request before sending the response. Exploiting this vulnerability allows malicious actors to cause service failures excessive CPU usage and reduced bandwidth...
ownCloud: SMB User Authentication Bypass and Persistence
Authentication Bypass ================== The external user authentication app in OwnCloud does not properly authenticate against an SMB server. In it's current implementation, the file owncloud/apps/userexternal/lib/smb.php, line 46-47 uses the command smbclient -L //host/dummy -Uuser%pass, where...
Debian DLA-509-1 : samba security update
The Samba 2:3.6.6-6+deb7u9 release, issued by the DSA-3548-1, introduced different regressions causing trust relationship with Win 7 domains to fail. The fix for the CVE-2016-2115 has been reverted, so administrators should set 'client signing = required' instead. For Debian 7 'Wheezy', these...
[SECURITY] [DLA 509-1] samba security update
Package : samba Version : 2:3.6.6-6+deb7u10 Debian Bug : 820982 821811 The Samba 2:3.6.6-6+deb7u9 release, issued by the DSA-3548-1, introduced different regressions causing trust relationship with Win 7 domains to fail. The fix for the CVE-2016-2115 has been reverted, so administrators should se...