CVE-2012-0817

Memory leak in smbd in Samba 3.6.x before 3.6.3 allows remote attackers to cause a denial of service memory and CPU consumption by making many connection requests...

CVE-2012-0817

Memory leak in smbd in Samba 3.6.x before 3.6.3 allows remote attackers to cause a denial of service memory and CPU consumption by making many connection requests...

CVE-2012-0817

Memory leak in smbd in Samba 3.6.x before 3.6.3 allows remote attackers to cause a denial of service memory and CPU consumption by making many connection requests...

Memory corruption

Memory leak in smbd in Samba 3.6.x before 3.6.3 allows remote attackers to cause a denial of service memory and CPU consumption by making many connection requests...

CVE-2012-0817

Memory leak in smbd in Samba 3.6.x before 3.6.3 allows remote attackers to cause a denial of service memory and CPU consumption by making many connection requests...

CVE-2012-0817

Memory leak in smbd in Samba 3.6.x before 3.6.3 allows remote attackers to cause a denial of service memory and CPU consumption by making many connection requests...

CVE-2012-0817

CVE-2012-0817: Samba (smbd) memory leak in the 3.6.x line leading to DoS (memory/CPU) under high connection load. OpenSUSE notes a fix in openSUSE-2012-109 and references updating to Samba 3.6.3; similarly, OpenVAS/Fedora advisories list CVE-2012-0817 as an affected item. The issue affects smbd’s...

Memory leak/Denial of service.

Description Samba versions 3.6.0 to 3.6.2 inclusive are vulnerable to a memory leak that can cause a server denial of service. The Samba smbd daemon that listens for incoming connections leaks a small amount of memory on every connection attempt. Although this is a small leak, it happens on every...

Samba SRVSVC RPC sec_io_acl Request Handling Heap Buffer Overflow

A heap-based buffer overflow vulnerability exists in the way Samba handles RPC messages...

SuSE 10 Security Update : Samba (ZYPP Patch Number 7671)

A cross-site request forgery CSRF and a cross-site scripting vulnerability have been fixed in samba's SWAT. - AV:N/AC:M/Au:S/C:N/I:P/A:N CVE-2011-2694: CVSS v2 Base Score: 3.5 AV:N/AC:M/Au:S/C:N/I:P/A:N. CVE-2011-2522: CVSS v2 Base Score: 3.5 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. T...

SuSE 11.1 Security Update : Samba (SAT Patch Number 5000)

A Cross-Site Request Forgery CSRF and a Cross Site Scripting vulnerability have been fixed in Samba's SWAT. CVE-2011-2522: CVSS v2 Base Score: 3.5 AV:N/AC:M/Au:S/C:N/I:P/A:N CVE-2011-2694: CVSS v2 Base Score: 3.5 AV:N/AC:M/Au:S/C:N/I:P/A:N %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

SuSE 10 Security Update : Samba (ZYPP Patch Number 7396)

With this update samba is not prone to a remote denial of service attack anymore. CVE-2011-0719 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid57165;...

Samba SWAT 3.0.2 - 3.0.4 HTTP Basic Auth base64 Buffer Overflow

According to its banner, the version of Samba running on the remote host is between 3.0.2 and 3.0.4, inclusive. An error exists in the base64 decoding functions, which can result in a buffer overflow. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

Samba idmap_ad.so Winbind nss_info Extension Local Privilege Escalation

According to its banner, the version of the Samba server installed on the remote host is affected by a local privilege escalation vulnerability. Specifically, the Winbind nssinfo extension, when the 'winbind nss info' option is set to 'rfc2307' or 'sfu', grants local users the privileges of gid 0...

Samba smbmnt Local Privilege Escalation

According to its banner, the version of Samba running on the remote host is in the 2.x or 3.x branch. Such versions are shipped with a utility called 'smbmnt'. When smbmnt has the setuid 'root' bit set, a local user with access to the victim can mount a Samba share and then execute a setuid or...

Samba < 3.0.6 Unspecified Remote Memory Leak Information Disclosure

According to its banner, the version of Samba running on the remote host is earlier than 3.0.6. Such versions contain multiple memory leaks that can allow remote, unauthorized information disclosure and a remote denial of service attack. Note that Nessus has not actually tried to exploit this iss...

Samba < 3.0.2 mksmbpasswd.sh Uninitialized Passwords

According to its banner, the version of Samba running on the remote host is earlier than 3.0.2. Such versions are shipped with an account creation script mksmbpasswd.sh that, when utilized to disable a user account, may overwrite the user's password with the contents of an uninitialized buffer...

IT-Grundschutz M4.332: Sichere Konfiguration der Zugriffssteuerung bei einem Samba-Server

IT-Grundschutz M4.332: Sichere Konfiguration der Zugriffssteuerung bei einem Samba-Server ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.94239 Diese Prüfung bezieht si...

IT-Grundschutz M4.326: Sicherstellung der NTFS-Eigenschaften auf einem Samba-Dateiserver

IT-Grundschutz M4.326: Sicherstellung der NTFS-Eigenschaften auf einem Samba-Dateiserver ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.94235 Diese Prüfung bezieht sic...

IT-Grundschutz M4.334: SMB Message Signing und Samba

IT-Grundschutz M4.334: SMB Message Signing und Samba ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.94241 Diese Prüfung bezieht sich auf die 12. Ergänzungslieferung 12...