Critical: Red Hat Security Advisory: samba3x security update

Updated samba3x packages that fix one security issue are now available for Red Hat Enterprise Linux 5 and Red Hat Enterprise Linux 5.6 Extended Update Support. The Red Hat Security Response Team has rated this update as having critical security impact. A Common Vulnerability Scoring System CVSS...

samba: Multiple heap-based buffer overflows in memory management based on NDR marshalling code output

The RPC code generator in Samba 3.x before 3.4.16, 3.5.x before 3.5.14, and 3.6.x before 3.6.4 does not implement validation of an array length in a manner consistent with validation of array memory allocation, which allows remote attackers to execute arbitrary code via a crafted RPC call...

Immunity Canvas: CVE_2012_1182_NONX

Name| CVE20121182NONX ---|--- CVE| CVE-2012-1182 Exploit Pack| CANVAS Description| CVE-2012-1182-NONX Notes| References: http://www.samba.org CVE Name: CVE-2012-1182 VENDOR: Samba Repeatability: Repeatable Date public: 04/10/2012 CVE Url: N/A CVSS: 0.0...

samba security update

3.5.10-115 - Security Release, fixes CVE-2012-1182 - resolves: 804644...

CVE-2012-1182

The RPC code generator in Samba 3.x before 3.4.16, 3.5.x before 3.5.14, and 3.6.x before 3.6.4 does not implement validation of an array length in a manner consistent with validation of array memory allocation, which allows remote attackers to execute arbitrary code via a crafted RPC call...

"root" credential remote code execution.

Description Samba versions 3.6.3 and all versions previous to this are affected by a vulnerability that allows remote code execution as the "root" user from an anonymous connection. The code generator for Samba's remote procedure call RPC code contained an error which caused it to generate code...

Samba SetInformationPolicy AuditEventsInfo Heap Overflow

This module triggers a vulnerability in the LSA RPC service of the Samba daemon because of an error on the PIDL auto-generated code. Making a specially crafted call to SetInformationPolicy to set a PolicyAuditEventsInformation allows to trigger a heap overflow and finally execute arbitrary code...

samba -- "root" credential remote code execution

Samba development team reports: Samba versions 3.6.3 and all versions previous to this are affected by a vulnerability that allows remote code execution as the "root" user from an anonymous connection. As this does not require an authenticated connection it is the most serious vulnerability...

Fedora Update for samba FEDORA-2012-1098

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for samba FEDORA-2012-1098

Check for the Version of samba OpenVAS Vulnerability Test Fedora Update for samba FEDORA-2012-1098 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

Samba 4.x < 4.0.4 AD DC File Permissions

Binary data 6720.prm...

Linux Gather Configurations

This module collects configuration files found on commonly installed applications and services, such as Apache, MySQL, Samba, Sendmail, etc. If a config file is found in its default path, the module will assume that is the file we want. This module requires Metasploit:...

VMSA-2012-0001 VMware ESXi and ESX updates to third party library and ESX Service Console

The remote ESXi is missing one or more security related Updates from VMSA-2012-0001. Summary VMware ESXi and ESX updates to third party library and ESX Service Console address several security issues. Relevant releases: ESXi 4.1 without patch ESXi410-201201401-SG ESXi 5.0 without patch...

Samba 'AndX' Request Heap-Based Buffer Overflow

Binary data sambaandxheapoverflow.nbin...

Samba 3.x 'etc/mtab'文件附加本地拒绝服务漏洞

BUGTRAQ ID: 49939 CVE ID: CVE-2011-1678 Samba是一套实现SMB（Server Messages Block）协议、跨平台进行文件共享和打印共享服务的程序。 Samba 3.5.8及更早版本中的smbfs尝试使用mount.cifs附加到/etc/mtab文件，umount.cifs附加到/etc/mtab.tmp文件，而没有检查资源限制，可使本地用户通过small RLIMITFSIZE值相关进程破坏/etc/mtab文件。 0 Samba 3.x 厂商补丁： Samba -----...

Ubuntu Update for samba USN-1374-1

Ubuntu Update for Linux kernel vulnerabilities USN-1374-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN13741.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for samba USN-1374-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This...

[ MDVSA-2012:025 ] samba

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2012:025 http://www.mandriva.com/security/ Package : samba Date : February 28, 2012 Affected: Enterprise Server 5.0 Problem Description: A vulnerability has been found and corrected in samba: Heap-based buffer...

Ubuntu: Security Advisory (USN-1374-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SuSE 10 Security Update : Samba (ZYPP Patch Number 7985)

This update of Samba fixes a heap-based buffer overflow that could be exploited by remote, unauthenticated attackers to crash the smbd daemon or potentially execute arbitrary code via specially crafted SMB AndX request packets. CVE-2012-0870 Also fixed two non security bugs : - Fix to handle doma...

NGS00237 Patch Notification: Samba Andx request Remote Code Execution

High Risk Vulnerability in Samba 25 February 2012 Andy Davis of NGS Secure has discovered a high risk vulnerability in the Samba service Impact: Remote Code Execution Versions affected: Samba versions up to 3.4.0 More details about this vulnerability and how to obtain software updates can be foun...