Fedora Core 6 : samba-3.0.24-8.fc6 (2007-751)

Thu Nov 15 2007 Simo Sorce 3.0.24-8.fc6 - Fix CVE-2007-4572 - Fix CVE-2007-5398 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora 8 : samba-3.0.27-0.fc8 (2007-3403)

Security Fixes : - CVE-2007-4572 - CVE-2007-5398 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Samba Web Administration Tool SWAT Detection (HTTP)

HTTP based detection of the Samba Web Administration Tool SWAT. SPDX-FileCopyrightText: 2005 SecuriTeam Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Detect SWAT server port

SWAT Samba Web Administration Tool is running on this port. SWAT allows Samba users to change their passwords, and offers to the sysadmin an easy-to-use GUI to configure Samba. However, it is not recommended to let SWAT be accessed by the world, as it allows an intruder to attempt to brute force...

GLSA-200407-21 : Samba: Multiple buffer overflows

The remote host is affected by the vulnerability described in GLSA-200407-21 Samba: Multiple buffer overflows Evgeny Demidov found a buffer overflow in SWAT, located in the base64 data decoder used to handle HTTP basic authentication CAN-2004-0600. The same flaw is present in the code used to...

SWAT Server Detection

Binary data 1470.prm...

Samba: Multiple buffer overflows

Background Samba is a package which allows nix systems to act as file servers for Windows computers. It also allows nix systems to mount shares exported by a Samba/CIFS/Windows server. The Samba Web Administration Tool SWAT is a web-based configuration tool part of the Samba package. Description...

DEBIAN-CVE-2004-0600

Buffer overflow in the Samba Web Administration Tool SWAT in Samba 3.0.2 to 3.0.4 allows remote attackers to execute arbitrary code via an invalid base-64 character during HTTP basic authentication...

SUSE-SA:2004:022: samba

The remote host is missing the patch for the advisory SUSE-SA:2004:022 samba. The Samba Web Administration Tool SWAT was found vulnerable to a buffer overflow in its base64 code. This buffer overflow can possibly be exploited remotely before any authentication took place to execute arbitrary code...

CVE-2004-0600

CVE-2004-0600 affects Samba SWAT (the Web Administration Tool) used with Samba 3.0.2–3.0.4. The vulnerability arises from a flaw in HTTP basic authentication base64 decoding, leading to a heap-based buffer overflow that can allow remote code execution or a denial of service. Public references (Sa...

SWAT PreAuthorization PoC

Hi, The following is a brief proof of concept exploit code for the vulnerability mentioned in "Evgeny Demidov" [email protected]'s advisory: Samba 3.x swat preauthentication buffer overflow Running the perl script against a vulnerable SWAT server will cause: Program received signal SIGSEGV,...

sambaPoC.txt

Hi, The following is a brief proof of concept exploit code for the vulnerability mentioned in "Evgeny Demidov" 's advisory: Samba 3.x swat preauthentication buffer overflow Running the perl script against a vulnerable SWAT server will cause: Program received signal SIGSEGV, Segmentation fault...

Samba SWAT buffer overflow

Buffer overflow in Base64 decoding functions...

Security Release - Samba 3.0.5 and 2.2.10

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Summary: Potential Buffer Overruns in Samba 3.0 and Samba 2.2 CVE ID: CAN-2004-0600, CAN-2004-0686 http://cve.mitre.org/ - ------------- CAN-2004-0600 - ------------- Affected Versions: = v3.0.2 The internal routine used by the Samba Web Administratio...

Samba 3.0.4 - SWAT Authorisation Buffer Overflow

Samba 3.0.4 - SWAT Authorisation Buffer Overflow !/usr/bin/perl Samba 3.0.4 and prior's SWAT Authorization Buffer Overflow Created by Noam Rathaus of Beyond Security Ltd. use IO::Socket; use strict; my $host = $ARGV0; my $remote = IO::Socket::INET-new Proto = "tcp", PeerAddr = $host, PeerPort =...

Samba <= 3.0.4 SWAT Authorization Buffer Overflow Exploit

Exploit for linux platform in category remote exploits ========================================================= Samba new Proto = "tcp", PeerAddr = $host, PeerPort = "901" ; unless $remote die "cannot connect to http daemon on $host" print "connected\n"; $remote-autoflush1; my $http = "GET /...

Potential Buffer Overrun in SWAT

Description The internal routine used by the Samba Web Administration Tool SWAT v3.0.2 and later to decode the base64 data during HTTP basic authentication is subject to a buffer overrun caused by an invalid base64 character. It is recommended that all Samba v3.0.2 or later installations running...

Samba 3.0.4 - SWAT Authorisation Buffer Overflow

!/usr/bin/perl Samba 3.0.4 and prior's SWAT Authorization Buffer Overflow Created by Noam Rathaus of Beyond Security Ltd. use IO::Socket; use strict; my $host = $ARGV0; my $remote = IO::Socket::INET-new Proto = "tcp", PeerAddr = $host, PeerPort = "901" ; unless $remote die "cannot connect to http...

Samba SWAT HTTP Basic Auth base64 Overflow

The remote host is running SWAT - a web-based administration tool for Samba. There is a buffer overflow condition in the remote version of this software which might allow an attacker to execute arbitrary code on the remote host by sending a malformed authorization request or any malformed base64...

RHEL 3 : samba (RHSA-2004:259)

Updated samba packages that fix buffer overflows, as well as other various bugs, are now available. Samba provides file and printer sharing services to SMB/CIFS clients. Evgeny Demidov discovered a flaw in the internal routine used by the Samba Web Administration Tool SWAT in Samba versions 3.0.2...