EUVD-2001-0793

Malware in sbrugna...

HP CIFS/9000 Server A.01.05/A.01.06 Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/5088/info A vulnerability has been reported in the /opt/cifsclient/bin/cifslogin utility distributed with CIFS/9000. The utility is prone to several buffer overflow conditions and may lead to root compromise. The...

HP CIFS/9000 Server A.01.05/A.01.06 - Local Buffer Overflow

// source: https://www.securityfocus.com/bid/5088/info A vulnerability has been reported in the /opt/cifsclient/bin/cifslogin utility distributed with CIFS/9000. The utility is prone to several buffer overflow conditions and may lead to root compromise. The vulnerability occurs due to the lack of...

CVE-2002-0991

Buffer overflows in the cifslogin command for HP CIFS/9000 Client A.01.06 and earlier, based on the Sharity package, allows local users to gain root privileges via long 1 -U, 2 -D, 3 -P, 4 -S, 5 -N, or 6 -u parameters...

CVE-2002-0991

CVE-2002-0991 : Buffer overflows in the cifslogin command of HP CIFS/9000 Client A.01.06 and earlier (based on the Sharity package) allow local users to gain root privileges by supplying excessively long parameters (-U, -D, -P, -S, -N, or -u). Affected versions are A.01.06 and earlier. The provid...

CVE-2002-0991

Buffer overflows in the cifslogin command for HP CIFS/9000 Client A.01.06 and earlier, based on the Sharity package, allows local users to gain root privileges via long 1 -U, 2 -D, 3 -P, 4 -S, 5 -N, or 6 -u parameters...

CVE-2001-0981

CVE-2001-0981 affects HP CIFS/9000 Server (SAMBA) versions A.01.07 and earlier. With the 'unix password sync' option enabled, the server calls passwd without the requesting username, which could cause the password of a different user to be changed. Impact: potential unauthorized password changes....

CVE-2001-0809

The CVE-2001-0809 issue affects HP-UX 11.0/11.11 CIFS/9000 Server (SAMBA) prior to patch A.01.06. When configured as a print server, local users can overwrite arbitrary files by modifying certain resources. The vulnerability is documented in HP patch PHNE_24164 (A.01.06) for s700/s800 11.X CIFS/9...

CVE-2001-0981

HP CIFS/9000 Server SAMBA A.01.07 and earlier with the "unix password sync" option enabled calls the passwd program without specifying the username of the user making the request, which could cause the server to change the password of a different user...