CVE-2013-0172

Samba 4.0.x before 4.0.1, in certain Active Directory domain-controller configurations, does not properly interpret Access Control Entries that are based on an objectClass, which allows remote authenticated users to bypass intended restrictions on modifying LDAP directory objects by leveraging 1...

CVE-2013-0172

Samba 4.0.x before 4.0.1, in certain Active Directory domain-controller configurations, does not properly interpret Access Control Entries that are based on an objectClass, which allows remote authenticated users to bypass intended restrictions on modifying LDAP directory objects by leveraging 1...

Design/Logic Flaw

Samba 4.0.x before 4.0.1, in certain Active Directory domain-controller configurations, does not properly interpret Access Control Entries that are based on an objectClass, which allows remote authenticated users to bypass intended restrictions on modifying LDAP directory objects by leveraging 1...

CVE-2013-0172

Samba 4.0.x before 4.0.1, in certain Active Directory domain-controller configurations, does not properly interpret Access Control Entries that are based on an objectClass, which allows remote authenticated users to bypass intended restrictions on modifying LDAP directory objects by leveraging 1...

CVE-2013-0172

Samba 4.0.x vulnerable before 4.0.1 due to improper interpretation of objectClass-based Access Control Entries, allowing remote authenticated users to bypass restrictions on modifying LDAP directory objects via (1) objectClass access by a user, (2) objectClass access by a group, or (3) write acce...

CVE-2013-0172

Samba 4.0.x before 4.0.1, in certain Active Directory domain-controller configurations, does not properly interpret Access Control Entries that are based on an objectClass, which allows remote authenticated users to bypass intended restrictions on modifying LDAP directory objects by leveraging 1...

Samba 4.x < 4.0.1 AD DC LDAP Directory Objects Security Bypass

According to its banner, the version of Samba 4.x running on the remote host is earlier than 4.0.1, and is, therefore, potentially affected by a security bypass vulnerability. When acting as an Active Directory AD Domain Controller DC, the application can improperly grant write access to an LDAP...

A Samba AD DC may provide authenticated users with

Description In AD, Access Control Entries can be assigned based on the objectClass of the object. If a user or a group the user is a member of has any access based on the objectClass, then that user has write access to that object. Additionally, if a user has write access to any attribute on the...

CVE-2013-0172

Samba 4.0.x before 4.0.1, in certain Active Directory domain-controller configurations, does not properly interpret Access Control Entries that are based on an objectClass, which allows remote authenticated users to bypass intended restrictions on modifying LDAP directory objects by leveraging 1...

openSUSE: Security Advisory for update (openSUSE-SU-2012:0507-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SuSE Update for update openSUSE-SU-2012:0507-1 (update)

Check for the Version of update OpenVAS Vulnerability Test $Id: gbsuse201205071.nasl 8336 2018-01-09 07:01:48Z teissa $ SuSE Update for update openSUSE-SU-2012:0507-1 update Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program ...

Samba DCE RPC IDL Parser Out-of-bounds Array Access (CVE-2012-1182)

An out-of-bounds array access vulnerability has been reported in Samba...

Samba 3.4.16/3.5.14/3.6.4 - SetInformationPolicy AuditEventsInfo Heap Overflow (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Samba SetInformationPolicy...

Samba SetInformationPolicy AuditEventsInfo Heap Overflow

Exploit for linux platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core'...

Samba SetInformationPolicy AuditEventsInfo Heap Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Samba SetInformationPolicy...

Samba 3.x 0-day remote root exploit

No description provided by source. !/usr/bin/python finding targets 4 31337z: gdb /usr/sbin/smbd ps auwx | grep smbd | grep -v grep | head -n1 | awk ' print $2 ' echo -e "print system" | grep '$1' - to get systemlibcaddr, enter this value in the 'systemlibcoffset' value of the targetfinder, run,...

Samba 3.6.3 remote root exploit

Exploit for linux platform in category remote exploits =========================================================== == Subject: "root" credential remote code execution. == == CVE ID: CVE-2012-1182 == == Versions: Samba 3.0.x - 3.6.3 inclusive == == Summary: Samba 3.0.x to 3.6.3 are affected by a =...

Samba 3.x Remote Root

!/usr/bin/python finding targets 4 31337z: gdb /usr/sbin/smbd ps auwx | grep smbd | grep -v grep | head -n1 | awk ' print $2 ' to get systemlibcaddr, enter this value in the 'systemlibcoffset' value of the targetfinder, run, sit back, wait for shell found by eax samba 0day godz loljk from binasci...

Samba 3.5.113.6.3 - Remote Code Execution

Samba 3.5.113.6.3 - Remote Code Execution source: https://www.securityfocus.com/bid/55655/info Samba is prone to an unspecified remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code with root privileges. Failed exploit attempts will cause a...

Samba 3.5.11/3.6.3 - Remote Code Execution

source: https://www.securityfocus.com/bid/55655/info Samba is prone to an unspecified remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code with root privileges. Failed exploit attempts will cause a denial-of-service condition. !/usr/bin/python finding...