2 matches found
samba: pam_winbind fails open when non-existent group specified to require_membership_of
The winbindnamelisttosidstringlist function in nsswitch/pamwinbind.c in Samba through 4.1.2 handles invalid requiremembershipof group names by accepting authentication by any user, which allows remote authenticated users to bypass intended access restrictions in opportunistic circumstances by...
3.6CVSS7.2AI score0.0379EPSS
SaveExploits1References4
smbfs and apache+php source code disclosure
Because of different filename handling in Posix and Windows there is an issue with resolving filenames with a backslash "" character appended on a windows share. Consider you have a windows share mounted on a linux box with a php script on it - let's say info.php. Executing find info.php and find...
7.1AI score
SaveExploits0
20