Lucene search
+L

4402 matches found

OpenVAS
OpenVAS
added 2013/03/22 12:0 a.m.24 views

CentOS Update for libipa_hbac CESA-2013:0663 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

4.9CVSS5.2AI score0.02154EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2013/03/22 12:0 a.m.29 views

RedHat Update for sssd RHSA-2013:0663-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

4.9CVSS6.5AI score0.02154EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2013/03/22 12:0 a.m.22 views

RedHat Update for sssd RHSA-2013:0663-01

Check for the Version of sssd OpenVAS Vulnerability Test RedHat Update for sssd RHSA-2013:0663-01 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

4.9CVSS6.4AI score0.02154EPSS
SaveExploits0References2
NVD
NVD
added 2013/03/21 4:55 p.m.24 views

CVE-2013-0287

The Simple Access Provider in System Security Services Daemon SSSD 1.9.0 through 1.9.4, when the Active Directory provider is used, does not properly enforce the simpledenygroups option, which allows remote authenticated users to bypass intended access restrictions...

4.9CVSS6AI score0.02154EPSS
SaveExploits0References16
OSV
OSV
added 2013/03/21 4:55 p.m.21 views

UBUNTU-CVE-2013-0287

The Simple Access Provider in System Security Services Daemon SSSD 1.9.0 through 1.9.4, when the Active Directory provider is used, does not properly enforce the simpledenygroups option, which allows remote authenticated users to bypass intended access restrictions...

4.9CVSS5.8AI score0.02154EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 2013/03/21 4:0 p.m.29 views

CVE-2013-0287

The Simple Access Provider in System Security Services Daemon SSSD 1.9.0 through 1.9.4, when the Active Directory provider is used, does not properly enforce the simpledenygroups option, which allows remote authenticated users to bypass intended access restrictions...

4.9CVSS5.3AI score0.02154EPSS
SaveExploits0
Cvelist
Cvelist
added 2013/03/21 4:0 p.m.37 views

CVE-2013-0287

The Simple Access Provider in System Security Services Daemon SSSD 1.9.0 through 1.9.4, when the Active Directory provider is used, does not properly enforce the simpledenygroups option, which allows remote authenticated users to bypass intended access restrictions...

5.9AI score0.02154EPSS
SaveExploits0References16
Tenable Nessus
Tenable Nessus
added 2013/03/21 12:0 a.m.30 views

CentOS 6 : sssd (CESA-2013:0663)

Updated sssd packages that fix one security issue and two bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

4.9CVSS5.6AI score0.02154EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2013/03/20 12:0 a.m.37 views

RHEL 6 : sssd (RHSA-2013:0663)

Updated sssd packages that fix one security issue and two bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

4.9CVSS5.6AI score0.02154EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2013/03/20 12:0 a.m.31 views

Scientific Linux Security Update : sssd on SL6.x i386/x86_64 (20130319)

When SSSD was configured as a Microsoft Active Directory client by using the new Active Directory provider introduced in SLSA-2013:0508, the Simple Access Provider 'accessprovider = simple' in '/etc/sssd/sssd.conf' did not handle access control correctly. If any groups were specified with the...

4.9CVSS5.5AI score0.02154EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2013/03/20 12:0 a.m.22 views

Samba 4.x < 4.0.4 AD DC File Permissions

According to its banner, the version of Samba running on the remote host is 4.x prior to 4.0.4 and is, therefore, potentially affected by a file permissions vulnerability. Files on Active Directory Domain ControllersAD DC may be created with world-writeable permissions when additional CIFS file...

6CVSS7.1AI score0.02155EPSS
SaveExploits0References4
Cent OS
Cent OS
added 2013/03/19 8:52 p.m.70 views

libipa_hbac, libsss_autofs, libsss_idmap, libsss_sudo, sssd security update

CentOS Errata and Security Advisory CESA-2013:0663 Updated sssd packages that fix one security issue and two bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CV...

4.9CVSS5.9AI score0.02154EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2013/03/19 6:24 p.m.7 views

sssd: simple access provider flaw prevents intended ACL use when client to an AD provider

The Simple Access Provider in System Security Services Daemon SSSD 1.9.0 through 1.9.4, when the Active Directory provider is used, does not properly enforce the simpledenygroups option, which allows remote authenticated users to bypass intended access restrictions...

4.9CVSS5.8AI score0.02154EPSS
SaveExploits0References4
Prion
Prion
added 2013/03/19 5:55 p.m.18 views

Design/Logic Flaw

Samba 4.x before 4.0.4, when configured as an Active Directory domain controller, uses world-writable permissions on non-default CIFS shares, which allows remote authenticated users to read, modify, create, or delete arbitrary files via standard filesystem operations...

6CVSS6.9AI score0.02155EPSS
SaveExploits0References2Affected Software1
UbuntuCve
UbuntuCve
added 2013/03/19 5:55 p.m.23 views

CVE-2013-1863

Samba 4.x before 4.0.4, when configured as an Active Directory domain controller, uses world-writable permissions on non-default CIFS shares, which allows remote authenticated users to read, modify, create, or delete arbitrary files via standard filesystem operations...

6CVSS7.1AI score0.02155EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2013/03/19 5:0 p.m.50 views

CVE-2013-1863

Samba 4.x before 4.0.4, when configured as an Active Directory domain controller, uses world-writable permissions on non-default CIFS shares, which allows remote authenticated users to read, modify, create, or delete arbitrary files via standard filesystem operations...

6.3AI score0.02155EPSS
SaveExploits0References2
CVE
CVE
added 2013/03/19 5:0 p.m.82 views

CVE-2013-1863

Samba 4.x before 4.0.4 configured as an Active Directory domain controller is affected by world-writable permissions on non-default CIFS shares, allowing remote authenticated users to read, modify, create, or delete arbitrary files via standard filesystem operations. The issue is centered on AD D...

6CVSS6.5AI score0.02155EPSS
SaveExploits0References2Affected Software1
Samba
Samba
added 2013/03/19 12:0 a.m.74 views

World-writeable files may be created in additional shares on a

Description Administrators of the Samba 4.0 Active Directory Domain Controller might unexpectedly find files created world-writeable if additional CIFS file shares are created on the AD DC. By default the AD DC is not vulnerable to this issue, as a specific inheritable ACL is set on the files in...

6CVSS7.1AI score0.02155EPSS
SaveExploits0
Metasploit
Metasploit
added 2013/03/14 12:40 p.m.20 views

PsExec NTDS.dit And SYSTEM Hive Download Utility

This module authenticates to an Active Directory Domain Controller and creates a volume shadow copy of the %SYSTEMDRIVE%. It then pulls down copies of the ntds.dit file as well as the SYSTEM hive and stores them. The ntds.dit and SYSTEM hive copy can be used in combination with other tools for...

7.4AI score
SaveExploits0
OpenVAS
OpenVAS
added 2013/03/12 12:0 a.m.31 views

CentOS Update for samba4 CESA-2013:0506 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

10CVSS8.5AI score0.74371EPSS
SaveExploits9References2
Rows per page
Query Builder