12 matches found
CVE-2007-2447-Exploit
CVE-2007-2447 익스플로잇 이 저장소는 Samba smbd 3.0.20 CVE-2007-2447 취약점에 대한 익스플로잇을 포함하며, 조작된 SMB 요청을 통해 원격 명령 실행을 가능하게 합니다. 전제 조건 이 익스플로잇은 Python 3 와 몇 가지 종속성이 필요합니다. 익스플로잇을 실행하기 전에 가상 환경을 설정하는 것이 좋습니다. 가상 환경 설정 1. 저장소 클론하기 : git clone https://github.com/your-repo/CVE-2007-2447.git cd CVE-2007-2447 2...
CVE-2026-28835
A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. Mounting a maliciously crafted SMB network share may lead to system termination...
Design/Logic Flaw
A vulnerability in the interaction between the Server Message Block SMB protocol preprocessor and the Snort 3 detection engine for Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass the configured policies or cause a denial of service DoS conditi...
Snort 2 - DCE/RPC Preprocessor Buffer Overflow (Metasploit)
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Snort 2 DCE/RPC preprocessor Buffer...
samba security update
CentOS Errata and Security Advisory CESA-2012:0332 Updated samba packages that fix one security issue are now available for Red Hat Enterprise Linux 4 and 5, and Red Hat Enterprise Linux 5.3 Long Life, and 5.6 Extended Update Support. The Red Hat Security Response Team has rated this update as...
Design/Logic Flaw
The SMB client in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote SMB servers to execute arbitrary code via a crafted 1 SMBv1 or 2 SMBv2 response, aka "SMB Client Response...
DEBIAN-CVE-2011-1140
Multiple stack consumption vulnerabilities in the dissectmscompressedstring and dissectmscldapstring functions in Wireshark 1.0.x, 1.2.0 through 1.2.14, and 1.4.0 through 1.4.3 allow remote attackers to cause a denial of service infinite recursion via a crafted 1 SMB or 2 Connection-less LDAP CLD...
Update Protection against SAMBA SMBI Packets Chaining Memory Corruption
A vulnerability has been reported in Samba, an open-source implementation of Server Message Block/Common Internet File System SMB/CIFS. The vulnerability is due to improper validation when chaining SMB1 packets. Remote attackers could exploit this vulnerability by sending a crafted SMB message to...
CVE-2009-0139
Integer overflow in the SMB component in Apple Mac OS X 10.5.6 allows remote SMB servers to cause a denial of service system shutdown or execute arbitrary code via a crafted SMB file system that triggers a heap-based buffer overflow...
CVE-2008-1105: Improper Restriction of Operations within the Bounds of a Memory Buffer
Heap-based buffer overflow in the receivesmbraw function in util/sock.c in Samba 3.0.0 through 3.0.29 allows remote attackers to execute arbitrary code via a crafted SMB response...
CVE-2006-3840
The SMB Mailslot parsing functionality in PAM in multiple ISS products with XPU 24.39/1.78/epj/x.x.x.1780, including Proventia A, G, M, Server, and Desktop, BlackICE PC and Server Protection 3.6, and RealSecure 7.0, allows remote attackers to cause a denial of service infinite loop via a crafted...
CVE-2006-3840
The SMB Mailslot parsing functionality in PAM in multiple ISS products with XPU 24.39/1.78/epj/x.x.x.1780, including Proventia A, G, M, Server, and Desktop, BlackICE PC and Server Protection 3.6, and RealSecure 7.0, allows remote attackers to cause a denial of service infinite loop via a crafted...