USN-3595-1 samba vulnerabilities

Björn Baumbach discovered that Samba incorrectly validated permissions when changing account passwords via LDAP. An authenticated attacker could use this issue to change the password of other users, including administrators, and perform actions as those users. CVE-2018-1057 It was discovered that...

UBUNTU-CVE-2018-1050

All versions of Samba from 4.0.0 onwards are vulnerable to a denial of service attack when the RPC spoolss service is configured to be run as an external daemon. Missing input sanitization checks on some of the input parameters to spoolss RPC calls could cause the print spooler service to crash...

Denial of Service Attack on external print server.

Description All versions of Samba from 3.6.0 onwards are vulnerable to a denial of service attack when the RPC spoolss service is configured to be run as an external daemon. Missing input sanitization checks on some of the input parameters to spoolss RPC calls could cause the print spooler servic...

CVE-2018-1050

All versions of Samba from 4.0.0 onwards are vulnerable to a denial of service attack when the RPC spoolss service is configured to be run as an external daemon. Missing input sanitization checks on some of the input parameters to spoolss RPC calls could cause the print spooler service to crash...

DEBIAN-CVE-2016-9373

In Wireshark 2.2.0 to 2.2.1 and 2.0.0 to 2.0.7, the DCERPC dissector could crash with a use-after-free, triggered by network traffic or a capture file. This was addressed in epan/dissectors/packet-dcerpc-nt.c and epan/dissectors/packet-dcerpc-spoolss.c by using the wmem file scope for private...

SUSE: Security Advisory for Samba (SUSE-SU-2015:0371-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Update : samba (openSUSE-SU-2014:0405-1)

"Samba was updated to fix security issues and bugs : Security issues fixed : - Password lockout was not enforced for SAMR password changes, this allowed brute-force attacks on passwords. CVE-2013-4496; bnc849224. - The DCE-RPC fragment length field is incorrectly checked, which could expose samba...

openSUSE Security Update : samba (openSUSE-SU-2013:1787-1)

"the following security issues were fixed in samba : - ACLs are not checked on opening an alternate data stream on a file or directory; CVE-2013-4475; bso10229 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...

Samba SPOOLSS smb_io_notify_option_type_data Request Buffer Overflow (CVE-2007-2446)

Samba is an open-source implementation of the file, print, and other network services suite known as SMB/CIFS Server Message Block/Common Internet File System. A heap-based buffer overflow vulnerability exists in the way Samba handles RPC messages. The vulnerability is due to a boundary error whi...

Novell Client NWSPOOL.DLL EnumPrinters Stack Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on systems with vulnerable installations of the Novell Netware Client. Authentication is not required to exploit this vulnerability. The specific flaw exists in nwspool.dll which is responsible for handling RPC requests through...

Samba smb_io_notify_option_type_data Heap Overflow Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Samba. User interaction is not required to exploit this vulnerability. The specific flaw exists in the parsing of RPC requests to the SPOOLSS RPC interface. When parsing a request to RFNPCNEX, heap...

Microsoft Windows spoolss GetPrinterData Denial of Service (CVE-2006-6296)

Windows Print Spooler Service SPOOLSS is a Windows service responsible for print queuing. A specially crafted RPC request could cause the spooler to consume all available memory on the Windows machine, and thus cause a denial of service...

Microsoft Windows spoolss DoS

Memory exhaustion in GetPrinterData function...

Microsoft Windows - spoolss GetPrinterData() Remote Denial of Service

Microsoft Windows - spoolss GetPrinterData Remote Denial of Service !/usr/bin/python MS Windows spoolss GetPrinterData 0day Memory Allocation Remote DoS Exploit Bug discovered by h07 Tested on Windows 2000 SP4 Polish + All Microsoft Security Bulletins Example: C:\python spoolssdos.py 192.168.0.2...

Microsoft Windows - spoolss GetPrinterData() Remote Denial of Service

!/usr/bin/python MS Windows spoolss GetPrinterData 0day Memory Allocation Remote DoS Exploit Bug discovered by h07 Tested on Windows 2000 SP4 Polish + All Microsoft Security Bulletins Example: C:\python spoolssdos.py 192.168.0.2 512 MS Windows GetPrinterData 0day Memory Allocation Remote DoS...