CVE-2014-8143

CVE-2014-8143 affects Samba AD DC deployments: Samba 4.0.x before 4.0.24, 4.1.x before 4.1.16, and 4.2.x before 4.2rc4 are vulnerable when AD DC is configured. The flaw allows remote authenticated users to abuse delegated authority for user/computer account creation to set the UF_SERVER_TRUST_ACC...

Security fix for the ALT Linux 10 package samba version 4.1.16-alt1

Jan. 15, 2015 Andrey Cherepanov 4.1.16-alt1 - New version - Security fixes: + CVE-2014-8143: Samba's AD DC allows the administrator to delegate creation of user or computer accounts to specific users or groups. However, all released versions of Samba's AD DC did not implement the additional...

Security fix for the ALT Linux 8 package samba-DC version 4.1.16-alt1

Jan. 15, 2015 Andrey Cherepanov 4.1.16-alt1 - New version - Security fixes: + CVE-2014-8143: Samba's AD DC allows the administrator to delegate creation of user or computer accounts to specific users or groups. However, all released versions of Samba's AD DC did not implement the additional...

CVE-2014-5005: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in ZOHO ManageEngine Desktop Central DC before 9 build 90055 allows remote attackers to execute arbitrary code via a .. dot dot in the fileName parameter in an LFU action to statusUpdate...

Security fix for the ALT Linux 8 package samba-DC version 4.1.11-alt1

Aug. 5, 2014 Alexey Shabalin 4.1.11-alt1 - 4.1.11 - fixed unstrcpy macro length is invalidCVE-2014-3560...

Ricoh DC Software DL-10 FTP Server (SR10.exe) <= 1.1.0.6 - Remote Buffer Overflow Vulnerability

No description provided by source. !/usr/bin/python Exploit Title: Ricoh DC Software DL-10 FTP Server SR10.exe = 1.1.0.6 Remote Buffer Overflow Vulnerability Version: = 1.1.0.6 Date: 2012-02-05 Author: Julien Ahrens Homepage: www.inshell.net Software Link: http://www.ricohpmmc.com Tested on:...

Ricoh DC DL-10 SR10 FTP USER Command Buffer Overflow"

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...

Open DC Hub 0.7.14 Remote Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/11747/info A remote buffer overflow vulnerability reportedly affects the Open DC Hub. This issue is due to a failure of the application to properly validate the length of user-supplied strings prior to copying them into...

Security fix for the ALT Linux 8 package samba-DC version 4.1.9-alt1

June 24, 2014 Alexey Shabalin 4.1.9-alt1 - 4.1.9 - fixed nmbd denial of serviceCVE-2014-0244 - fixed Segmentation fault in smbdmarshalldirentryCVE-2014-3493...

Security fix for the ALT Linux 8 package samba-DC version 4.1.8-alt1

June 4, 2014 Alexey Shabalin 4.1.8-alt1 - 4.1.8 - fixed CVE-2014-0239, CVE-2014-0178...

PT-2014-4258

Name of the Vulnerable Software and Affected Versions Dotclear versions prior to 2.6.2 Description The issue allows remote attackers to execute arbitrary PHP code via a serialized object in the dc passwd cookie to a password-protected page. This is due to improper handling by certain PHP files,...

Security fix for the ALT Linux 8 package samba-DC version 4.1.6-alt1

March 17, 2014 Alexey Shabalin 4.1.6-alt1 - 4.1.6 - fixed CVE-2013-4496, CVE-2013-6442...

Security fix for the ALT Linux 8 package samba-DC version 4.1.3-alt1

Dec. 9, 2013 Alexey Shabalin 4.1.3-alt1 - 4.1.3 - fixed CVE-2013-4408, CVE-2012-6150...

GLSA-201311-12 : Open DC Hub: Arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-201311-12 Open DC Hub: Arbitrary code execution A stack-based buffer overflow flaw has been discovered in the way Open DC Hub sanitized content of a users MyINFO message. Impact : A remote authenticated user may be able to execute...

Open DC Hub: Arbitrary code execution

Background Open DC Hub is the hub software for the Direct Connect file sharing network. Description A stack-based buffer overflow flaw has been discovered in the way Open DC Hub sanitized content of a user’s MyINFO message. Impact A remote authenticated user may be able to execute arbitrary code ...

Security fix for the ALT Linux 8 package samba-DC version 4.0.11-alt1

Nov. 12, 2013 Alexey Shabalin 4.0.11-alt1 - 4.0.11 - fixed CVE-2013-4475, CVE-2013-4476...

MIRcon Preview: What to Expect in the Technical Track

MIRcon 2013, Nov. 5-6, Washington, DC is right around the corner. Have you registered yet? Don't miss out! With targeted attacks continuing for the foreseeable future, you should be sure to take advantage of this opportunity to learn from leading industry cybersecurity experts. The two day...

Security fix for the ALT Linux 8 package samba-DC version 4.0.8-alt1

Aug. 7, 2013 Alexey Shabalin 4.0.8-alt1 - 4.0.8 - fixed CVE-2013-4124...

A Samba AD DC may provide authenticated users with

Description In AD, Access Control Entries can be assigned based on the objectClass of the object. If a user or a group the user is a member of has any access based on the objectClass, then that user has write access to that object. Additionally, if a user has write access to any attribute on the...

DC Innovation SQL Injection

010101010101010101010101010101010101010101010101010101010 0 0 1 Iranian Datacoders Security Team 1 0 0 1 www.DataCoderS.Ir 1 010101010101010101010101010101010101010101010101010101010 ++ Exploit Title : DC Innovation SQli Injection Vulnerability Author : Iranian Datacoders Security Team Discovered...