SUSE CVE-2022-22995

The combination of primitives offered by SMB and AFP in their default configuration allows the arbitrary writing of files. By exploiting these combination of primitives, an attacker can execute arbitrary code...

The vulnerability of the dsi_writeinit function in the implementation of the Apple Filing Protocol Netatalk allows a hacker to execute arbitrary code in the context of the root user.

The vulnerability of the dsiwriteinit function in the Apple Filing Protocol Netatalk implementation is related to the possibility of buffer overflow attacks. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the root user remotely...

Vulnerabilities fixed in Netatalk

Vulnerabilities have been fixed in Netatalk. Netatalk is an open-source protocol that allows Unix systems to communicate with Apple systems. Netatalk uses the Apple Filing Protocol; the vulnerabilities found are in this protocol. The vulnerabilities allow an unauthenticated remote malicious perso...

DEBIAN-CVE-2022-22995

The combination of primitives offered by SMB and AFP in their default configuration allows the arbitrary writing of files. By exploiting these combination of primitives, an attacker can execute arbitrary code...

UBUNTU-CVE-2022-22995

The combination of primitives offered by SMB and AFP in their default configuration allows the arbitrary writing of files. By exploiting these combination of primitives, an attacker can execute arbitrary code...

PT-2022-15765 · Afp +5 · Afp +5

Name of the Vulnerable Software and Affected Versions: SMB and AFP affected versions not specified Description: The combination of primitives offered by SMB and AFP in their default configuration allows the arbitrary writing of files. By exploiting this combination of primitives, an attacker can...

Western Digital My Cloud 后置链接漏洞

Western Digital My Cloud is a personal cloud storage device from Western Digital. A backlink vulnerability exists in Western Digital My Cloud OS 5 due to insufficient file validation during file uploads in the native language combination provided by SMB and AFP in its default configuration. A...

The vulnerability in the implementation of SMB and AFP network protocol functions in the My Cloud OS operating systems allows a perpetrator to gain unauthorized access to protected information or execute arbitrary code.

The vulnerability of the SMB and AFP network protocol implementations in My Cloud OS operating systems is related to incorrect handling of symbolic links. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or execute arbitrary code...

CVE-2021-3310

Western Digital My Cloud OS 5 devices before 5.10.122 mishandle Symbolic Link Following on SMB and AFP shares. This can lead to code execution and information disclosure by reading local files...

AppleShare IP / Apple Filing Protocol (AFP) Unencrypted Cleartext Login

The remote host is running a AppleShare IP / Apple Filing Protocol AFP service that allows cleartext logins over unencrypted connections. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

QNAP Systems QNAP QTS Directory Traversal Vulnerability

QNAP Systems QNAP QTS is a Turbo NAS operating system from QNAP Systems. A directory traversal vulnerability exists in QNAP Systems QNAP QTS. When AFP is enabled in the program, a remote attacker can read or write arbitrary files by submitting a special directory traversal request while accessing...

wireshark: DoS via excessive CPU consumption in AFP dissector (wnpa-sec-2012-17)

epan/dissectors/packet-afp.c in the AFP dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service loop and CPU consumption via a large number of ACL entries...

wireshark: DoS via excessive CPU consumption in AFP dissector (wnpa-sec-2012-17)

epan/dissectors/packet-afp.c in the AFP dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service loop and CPU consumption via a large number of ACL entries...

Apple Filing Protocol Info Enumerator

This module fetches AFP server information, including server name, network address, supported AFP versions, signature, machine type, and server flags. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class...

OS Identification : Apple Filing Protocol

This script attempts to identify the operating system type and version by looking at the capabilities of the remote Apple Filing Protocol Server. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid53331; scriptversion"1.13"; scriptcvsdate"Date: 2020/01/22";...

afp-brute NSE Script

Performs password guessing against Apple Filing Protocol AFP. Script Arguments afp.password, afp.username See the documentation for the afp library. passdb, unpwdb.passlimit, unpwdb.timelimit, unpwdb.userlimit, userdb See the documentation for the unpwdb library. Example Usage nmap -p 548 --scrip...

CVE-2008-1027

CVE-2008-1027 is tied to Apple File Protocol (AFP) on Mac OS X prior to 10.5.3, where AFP Server did not verify that requested files/directories were inside shared folders. This allowed remote attackers to read arbitrary files via unspecified AFP traffic. The issue is documented in the 2008-003 s...

CVE-2008-0759

ExtremeZ-IP.exe in ExtremeZ-IP File and Print Server 5.1.2x15 and earlier allows remote attackers to cause a denial of service daemon crash via an invalid UAM field in a request to the Apple Filing Protocol AFP service on TCP port 548...

Server side request forgery (ssrf)

ExtremeZ-IP.exe in ExtremeZ-IP File and Print Server 5.1.2x15 and earlier allows remote attackers to cause a denial of service daemon crash via an invalid UAM field in a request to the Apple Filing Protocol AFP service on TCP port 548...

CVE-2008-0759

CVE-2008-0759 affects ExtremeZ-IP File and Print Server (ExtremeZ-IP.exe) versions up to 5.1.2x15. The vulnerability allows remote attackers to trigger a daemon crash/DoS by sending an invalid UAM field in an AFP (Apple Filing Protocol) request to TCP port 548. Exploitation details are not provid...