11676 matches found
CVE-2011-1018
CVE-2011-1018 affects Logwatch 7.3.6 (logwatch.pl) where remote attackers can execute arbitrary commands via shell metacharacters in a log file name, demonstrated via a crafted Samba username. Multiple advisories (RHEL/Oracle/OpenSUSE/MiracleLinux, CentOS/Scientific Linux/OpenVAS) reference this ...
CVE-2011-1018
logwatch.pl in Logwatch 7.3.6 allows remote attackers to execute arbitrary commands via shell metacharacters in a log file name, as demonstrated via a crafted username to a Samba server...
Denial of service - memory corruption
Description All current released versions of Samba are vulnerable to a denial of service caused by memory corruption. Range checks on file descriptors being used in the FDSET macro were not present allowing stack corruption. This can cause the Samba code to crash or to loop attempting to select o...
samba security update
3.5.4-68.1 - Security Release, fixes CVE-2010-3069 - resolves: 632264...
Solaris 10 (sparc) : 146363-01
SunOS 5.10: Samba patch. Date this patch was last updated by Sun : Jan/04/11 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...
SuSE 11 Security Update : Samba (SAT Patch Number 1352)
samba's makeconnectionsnum handles certain input incorrectly, which may lead to disclosure of the root directory. CVE-2009-2813 has been assigned to this issue. Additionally an information disclosure vulnerability in mount.cifs has been fixed CVE-2009-2948 as well as a DoS condition. CVE-2009-290...
Low: Red Hat Bug Fix Advisory: samba3x bug fix and enhancement update
Updated samba3x packages that fix several bugs and add various enhancements are now available. Samba is a suite of programs used by machines for authentication, and file and printer sharing. These updated samba3x packages provide fixes for the following bugs: Users of trusted child domains were n...
samba: mount.cifs improper device name and mountpoint strings sanitization
client/mount.cifs.c in mount.cifs in smbfs in Samba 3.4.5 and earlier does not verify that the 1 device name and 2 mountpoint strings are composed of valid characters, which allows local users to cause a denial of service mtab corruption via a crafted string...
samba: Race condition by mount (mount.cifs) operations
client/mount.cifs.c in mount.cifs in smbfs in Samba 3.0.22, 3.0.28a, 3.2.3, 3.3.2, 3.4.0, and 3.4.5 allows local users to mount a CIFS share on an arbitrary mountpoint, and gain privileges, via a symlink attack on the mountpoint directory file...
Citrix Access Gateway Command Execution
The Citrix Access Gateway provides support for multiple authentication types. When utilizing the external legacy NTLM authentication module known as ntlmauthenticator the Access Gateway spawns the Samba 'samedit' command line utility to verify a user's identity and password. By embedding shell...
VMSA-2010-0019 : VMware ESX third-party updates for Service Console
a. Service Console update for samba The service console package samba is updated to version 3.0.9-1.3E.18. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the name CVE-2010-3069 to this issue. b. Service Console update for bzip2 The service console package bzip2 is...
VMware ESX third party updates for Service Console
a. Service Console update for samba The service console package samba is updated to version 3.0.9-1.3E.18. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the name CVE-2010-3069 to this issue. Column 4 of the following table lists the action required to remediate the...
VMSA-2010-0019:VMware ESX third party updates for Service Console
VMSA-2010-0019.3 VMware ESX third party updates for Service Console VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2010-0019.3 VMware Security Advisory Synopsis: VMware ESX third party updates for Service Console VMware Security Advisory Issue date: 2010-12-07 VMware Security...
Fedora Update for samba FEDORA-2010-14768
Check for the Version of samba OpenVAS Vulnerability Test Fedora Update for samba FEDORA-2010-14768 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...
SuSE 11 / 11.1 Security Update : Samba (SAT Patch Numbers 3099 / 3100)
A buffer overflow in the sidparse function of samba could potentially be exploited by remote attackers to execute arbitrary code. CVE-2010-3069 Additionally the update also contains fixes for the following non-security issues : - Failed to join ADS Domain. bnc567013 - Samba 3.0 / 3.2 doesn't work...
SuSE 11 Security Update : (SAT Patch Number 2544)
This update of the Samba server package fixes the following security issues : - A buffer overrun was possible in chainreply code in 3.3.x and below, which could be used to crash the samba server or potentially execute code. CVE-2010-2063 - Take extra care that a mount point of mount.cifs does not...
Fedora Update for samba FEDORA-2010-14768
The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
RHEL 6 : samba (RHSA-2010:0860)
The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2010:0860 advisory. Samba is a suite of programs used by machines to share files, printers, and other information. A missing array boundary checking flaw was found in th...