CentOS 3 / 4 : samba (CESA-2007:0060)

Updated samba packages that fix a denial of service vulnerability are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. Samba provides file and printer sharing services to SMB/CIFS clients. A denial of service flaw was found in...

RHEL 3 / 4 : samba (RHSA-2007:0060)

Updated samba packages that fix a denial of service vulnerability are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. Samba provides file and printer sharing services to SMB/CIFS clients. A denial of service flaw was found in...

samba security update

CentOS Errata and Security Advisory CESA-2007:0060 Updated samba packages that fix a denial of service vulnerability are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. Samba provides file and printer sharing services to SMB/CIF...

Debian DSA-1257-1 : samba - several vulnerabilities

Several remote vulnerabilities have been discovered in samba, a free implementation of the SMB/CIFS protocol, which may lead to the execution of arbitrary code or denial of service. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-0452 It was...

Samba服务器VFS插件afsacl.so远程格式串处理漏洞

Samba是一套实现SMB（Server Messages Block）协议、跨平台进行文件共享和打印共享服务的程序。 Samba的VFS插件afsacl.so库在处理文件名时存在格式串漏洞，攻击者可能利用此漏洞诱使用户处理恶意的VFS分区控制服务器。 Samba在调用snprintf时将磁盘上所储存的文件名用作了格式串，如果用户能够写入的共享使用Samba的afsacl.so库对AFS文件系统上的文件设置Windows NT访问控制列表的话，就可能通过文件名中的格式串标识符导致执行任意代码。 这个漏洞仅影响与CIFS共享了AFS文件系统并在smb.conf中明确要求加载afsacl.s...

Samba延迟CIFS文件打开拒绝服务漏洞

Samba是一套实现SMB（Server Messages Block）协议、跨平台进行文件共享和打印共享服务的程序。 Samba的延迟文件打开机制的实现上存在漏洞，远程攻击者可能利用此漏洞对服务器执行拒绝服务攻击。 Samba的文件服务守护程序smbd支持延迟文件打开调用。在某些环境下重新命名文件时可能没有从延迟的打开队列删除请求，这样smbd就会陷入试图处理打开请求服务的死循环。如果已认证用户打开了多个CIFS会话的话，每个会话都会生成新的smbd进程，每个连接都会陷入死循环，这样就会导致在服务器上耗尽内存和CPU资源。 Samba 3.0.6 - 3.0.23d 厂商补丁：...

Format string bug in afsacl.so VFS plugin.

Description NOTE: This security advisory only impacts Samba servers that share AFS file systems to CIFS clients and which have been explicitly instructed in smb.conf to load the afsacl.so VFS module. The source defect results in the name of a file stored on disk being used as the format string in...

samba -- potential Denial of Service bug in smbd

The Samba Team reports: Internally Samba's file server daemon, smbd, implements support for deferred file open calls in an attempt to serve client requests that would otherwise fail due to a share mode violation. When renaming a file under certain circumstances it is possible that the request is...

samba -- format string bug in afsacl.so VFS plugin

The Samba Team reports: NOTE: This security advisory only impacts Samba servers that share AFS file systems to CIFS clients and which have been explicitly instructed in smb.conf to load the afsacl.so VFS module. The source defect results in the name of a file stored on disk being used as the form...

DSA-1257 samba

Bulletin has no description...

Mandrake Linux Security Advisory : kernel (MDKSA-2006:151)

A number of vulnerabilities were discovered and corrected in the Linux 2.6 kernel : Prior to and including 2.6.16-rc2, when running on x8664 systems with preemption enabled, local users can cause a DoS oops via multiple ptrace tasks that perform single steps CVE-2006-1066. Prior to 2.6.16, a...

CVE-2006-5091

Unspecified vulnerability in HP-UX B.11.11 and B.11.23 CIFS Server Samba allows local users to gain privileges or obtain "unauthorized access" via unspecified vectors...

CVE-2006-5091

Technical details about CVE-2006-5091 are not publicly provided in the supplied documents; no affected products, vectors, or fixes are disclosed. Monitor for updates.

CVE-2006-5091

Unspecified vulnerability in HP-UX B.11.11 and B.11.23 CIFS Server Samba allows local users to gain privileges or obtain "unauthorized access" via unspecified vectors...

HP-UX CIFS Server privilege scalation

No description provided...

[SA22079] HP-UX CIFS Server Security Bypass and Privilege Escalation

TITLE: HP-UX CIFS Server Security Bypass and Privilege Escalation SECUNIA ADVISORY ID: SA22079 VERIFY ADVISORY: http://secunia.com/advisories/22079/ CRITICAL: Less critical IMPACT: Security Bypass, Privilege escalation WHERE: Local system OPERATING SYSTEM: HP-UX 11.x http://secunia.com/product/13...

RHEL 2.1 / 3 / 4 : samba (RHSA-2006:0591)

Updated samba packages that fix a denial of service vulnerability are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. Samba provides file and printer sharing services to SMB/CIFS clients. A denial of service bug was found in the...

samba security update

CentOS Errata and Security Advisory CESA-2006:0591-6 Updated samba packages that fix a denial of service vulnerability are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. Samba provides file and printer sharing services to...

Important: Red Hat Security Advisory: samba security update

Updated samba packages that fix a denial of service vulnerability are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. Samba provides file and printer sharing services to SMB/CIFS clients. A denial of service bug was found in the...

Samba fails to properly handle multiple share connection requests

Overview There is a vulnerability in the smbd process which may allow an attacker to create a denial of service condition. Description Samba Samba is an open-source implementation of SMB/CIFS file and print services. It is frequently included in UNIX and Linux distributions and is typically used...