959 matches found
[USN-702-1] Samba vulnerability
=========================================================== Ubuntu Security Notice USN-702-1 January 05, 2009 samba vulnerability CVE-2009-0022 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 8.10 This advisory also applie...
Samba directory traversal
Root filesystem access is possible if "registry shares = yes" option is enabled...
CVE-2009-0022
Samba 3.2.0 through 3.2.6, when registry shares are enabled, allows remote authenticated users to access the root filesystem via a crafted connection request that specifies a blank share name...
DEBIAN-CVE-2009-0022
Samba 3.2.0 through 3.2.6, when registry shares are enabled, allows remote authenticated users to access the root filesystem via a crafted connection request that specifies a blank share name...
CVE-2009-0022
Samba 3.2.0 through 3.2.6, when registry shares are enabled, allows remote authenticated users to access the root filesystem via a crafted connection request that specifies a blank share name...
CVE-2009-0022
Samba 3.2.0 through 3.2.6, when registry shares are enabled, allows remote authenticated users to access the root filesystem via a crafted connection request that specifies a blank share name...
USN-702-1: Samba vulnerability
Gunter Höckel discovered that Samba with registry shares enabled did not properly validate share names. An authenticated user could gain access to the root filesystem by using an older version of smbclient and specifying an empty string as a share name. This is only an issue if registry shares ar...
Potential access to "/" in setups with
Description When connecting to a share called "" empty string using an older version of smbclient before 3.0.28 for example with: 'smbclient //server/ -U user%pass' access to the root filesystem is granted with the privileges of the authenticated user. This only happens in setups with registry...
User Mountable NFS shares
It is possible to access the remote NFS shares without having root privileges. SPDX-FileCopyrightText: 2008 Renaud Deraison, modified 2004 Michael Stone Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifie...
Directory traversal and NULL pointer in Acronis PXE Server 2.0.0.1076
Luigi Auriemma Application: Acronis PXE Server http://www.acronis.com/enterprise/products/snapdeploy/ Versions: = 2.0.0.1076 Platforms: Windows Bugs: A directory traversal B NULL pointer Exploitation: remote Date: 08 Mar 2008 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1...
Acronis PXE Server 2.0.0.1076 Directory Traversal / NULL Pointer Vulns
Exploit for unknown platform in category remote exploits ====================================================================== Acronis PXE Server 2.0.0.1076 Directory Traversal / NULL Pointer Vulns ====================================================================== Luigi Auriemma Application:...
acronis pxe server 2.0.0.1076 - Directory Traversal Null Pointer
acronis pxe server 2.0.0.1076 - Directory Traversal Null Pointer Luigi Auriemma Application: Acronis PXE Server http://www.acronis.com/enterprise/products/snapdeploy/ Versions: = 2.0.0.1076 Platforms: Windows Bugs: A directory traversal B NULL pointer Exploitation: remote Date: 08 Mar 2008 Author...
Apache 2.2.6 (Windows) - Share PHP File Extension Mapping Information Disclosure
source: https://www.securityfocus.com/bid/26939/info Apache is prone to an information-disclosure vulnerability. This issue occurs because Apache fails to properly associate file extensions with the correct engines when handling specially crafted requests for files on Windows SMB shares. Attacker...
Critical: Red Hat Security Advisory: samba security and bug fix update
Updated samba packages that fix a security issue and a bug are now available for Red Hat Enterprise Linux. This update has been rated as having critical security impact by the Red Hat Security Response Team. Samba is a suite of programs used by machines to share files, printers, and other...
Ubuntu 5.10 / 6.06 LTS / 6.10 : samba vulnerabilities (USN-419-1)
A flaw was discovered in Samba's file opening code, which in certain situations could lead to an endless loop, resulting in a denial of service. CVE-2007-0452 A format string overflow was discovered in Samba's ACL handling on AFS shares. Remote users with access to an AFS share could create craft...
CVE-2004-2730
CVE-2004-2730 describes a local privilege escalation in Sysinternals PsTools: an improper disconnection from remote IPC$ and ADMIN$ shares allows local users to access these shares with elevated privileges by reusing existing mappings. The connected Kaspersky entry (KLA10264) confirms a local-exp...
CVE-2004-2730
Sysinternals PsTools before 2.05, including 1 PsExec before 1.54, 2 PsGetsid before 1.41, 3 PsInfo before 1.61, 4 PsKill before 1.03, 5 PsList before 1.26, 6 PsLoglist before 2.51, 7 PsPasswd before 1.21, 8 PsService before 2.12, 9 PsSuspend before 1.05, and 10 PsShutdown before 2.32, does not...
Unfixed XSS vulnerability at www.investsmart.com.au
Security researcher Hotpockets, has submitted on 19/06/2007 a cross-site-scripting XSS vulnerability affecting www.investsmart.com.au, which at the time of submission ranked 182093 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 22/06/2007. It ...
MDKA-2007:001 : samba
A number of minor issues were present in the samba packages shipped with Mandriva 2007.0. For users with filesystem quotas, samba would not indicate the remaining quota as the free disk space as intended. Problems with storing accounts with upper-case usernames in the smbpasswd passdb backend...
USN-419-1: Samba vulnerabilities
A flaw was discovered in Samba's file opening code, which in certain situations could lead to an endless loop, resulting in a denial of service. CVE-2007-0452 A format string overflow was discovered in Samba's ACL handling on AFS shares. Remote users with access to an AFS share could create craft...