Samba注册表共享名非授权访问漏洞

BUGTRAQ ID: 33118 CVECAN ID: CVE-2009-0022 Samba是一套实现SMB（Server Messages Block）协议、跨平台进行文件共享和打印共享服务的程序。 启用了注册表共享的Samba没有正确地验证共享名，通过认证的攻击者可以通过使用较老版本的smbclient并指定空字符串为共享名（如smbclient //server/ -U user%pass）来访问root文件系统。 Samba 3.2.0 - 3.2.6 临时解决方法： 通过registry shares = no禁用注册表共享。 厂商补丁： Samba -----...

[SECURITY] Fedora 8 Update: samba-3.0.33-0.fc8

Samba is the suite of programs by which a lot of PC-related machines share files, printers, and other information such as lists of available files and printers. The Windows NT, OS/2, and Linux operating systems support this natively, and add-on packages can enable the same thing for DOS, Windows,...

[SECURITY] Fedora 10 Update: samba-3.2.5-0.23.fc10

Samba is the suite of programs by which a lot of PC-related machines share files, printers, and other information such as lists of available files and printers. The Windows NT, OS/2, and Linux operating systems support this natively, and add-on packages can enable the same thing for DOS, Windows,...

[SECURITY] Fedora 9 Update: samba-3.2.5-0.22.fc9

Samba is the suite of programs by which a lot of PC-related machines share files, printers, and other information such as lists of available files and printers. The Windows NT, OS/2, and Linux operating systems support this natively, and add-on packages can enable the same thing for DOS, Windows,...

Samba smbd远程信息泄露漏洞

BUGTRAQ ID: 32494 CVECAN ID: CVE-2008-4314 Samba是一套实现SMB（Server Messages Block）协议、跨平台进行文件共享和打印共享服务的程序。 Samba在处理trans、trans2和nttrans请求时存在边界条件错误。这些请求用于在客户端和服务器之间传输任意数量的内存，包含有两个偏移：偏移A指向客户端所发送的PDU，偏移B将传输的内存引导到服务端上的缓冲区。由于在偏移A中的一个剪切错误，导致远程攻击者可以通过发送特制的请求泄露受限制的smbd进程内存。 Samba 3.0.29 - 3.2.4 Samba -----...

Easy File Sharing Web Server Information Disclosure

The remote web server is affected by an information disclosure vulnerability. Description : The version of Easy File Sharing Web Server that is installed on the remote host fails to restrict access to files via alternative data streams. By passing a specially-crafted request to the web server, an...

Easy File Sharing Web Server Information Disclosure

The version of Easy File Sharing Web Server that is installed on the remote host fails to restrict access to files via alternative data streams. By passing a specially-crafted request to the web server, an attacker may be able to access privileged information. SPDX-FileCopyrightText: 2008 Justin...

Attachmax Dolphin <= 2.1.0 Multiple Remote Vulnerabilities

No description provided by source. \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV101$2008 ----------------------------------------------------------------------------------------- ECHOADV101$2008 Attachmax Dolphin = 2.1.0 Multiple Vulnerability...

CVE-2008-3618

The File Sharing pane in the Sharing preference pane in Apple Mac OS X 10.5 through 10.5.4 does not inform users that the complete contents of their own home directories are shared for their own use, which might allow attackers to leverage other vulnerabilities and access files for which sharing...

Code injection

The File Sharing pane in the Sharing preference pane in Apple Mac OS X 10.5 through 10.5.4 does not inform users that the complete contents of their own home directories are shared for their own use, which might allow attackers to leverage other vulnerabilities and access files for which sharing...

CVE-2008-3618

Summary of CVE-2008-3618 : The Mac OS X 10.5.x File Sharing feature (Sharing pane) could inadvertently disclose the complete contents of a user’s home directory, potentially enabling access to files not intended for sharing. This affects OS X 10.5 through 10.5.4. The issue is documented as high-s...

CVE-2008-3618

The File Sharing pane in the Sharing preference pane in Apple Mac OS X 10.5 through 10.5.4 does not inform users that the complete contents of their own home directories are shared for their own use, which might allow attackers to leverage other vulnerabilities and access files for which sharing...

attachmax-sqlrfidisclose.txt

\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV101$2008 ----------------------------------------------------------------------------------------- ECHOADV101$2008 Attachmax Dolphin = 2.1.0 Multiple Vulnerability...

Attachmax Dolphin 2.1.0 - Multiple Vulnerabilities

Attachmax Dolphin 2.1.0 - Multiple Vulnerabilities \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV101$2008 ----------------------------------------------------------------------------------------- ECHOADV101$2008 Attachmax Dolphin = 2.1.0 Multiple...

Apple Mac OS X file sharing allows authenticated remote access to files and directories

Overview Apple Mac OS X Leopard does not accurately reflect which files and directories are available via sharing. Description Apple Mac OS X Leopard 10.5.x allows files and directories to be shared via a "Shared Folders" feature. OS X lists the folders that are shared using this feature, however...

[SECURITY] Fedora 9 Update: samba-3.2.3-0.20.fc9

Samba is the suite of programs by which a lot of PC-related machines share files, printers, and other information such as lists of available files and printers. The Windows NT, OS/2, and Linux operating systems support this natively, and add-on packages can enable the same thing for DOS, Windows,...

[SECURITY] Fedora 9 Update: samba-3.2.3-0.20.fc9

Samba is the suite of programs by which a lot of PC-related machines share files, printers, and other information such as lists of available files and printers. The Windows NT, OS/2, and Linux operating systems support this natively, and add-on packages can enable the same thing for DOS, Windows,...

Security Best Practice: Blocking TeamViewer

TeamViewer is a cross-platform remote control application that allows the user to take complete control over a computer anywhere on the Internet, even through firewalls. TeamViewer also has file-sharing and chat capabilities. The use of TeamViewer may circumvent the organizational security policy...

OFFSystem HTTP头字段数据处理远程缓冲区溢出漏洞

BUGTRAQ ID: 29809 CNCAN ID：CNCAN-2008062310 OFFSystem是一款开源文件分享软件。 OFFSystem处理HTTP头字段数据存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序权限执行任意代码。 发送特殊构建的包含畸形HTTP头字段的HTTP请求，可导致缓冲区溢出，可能以应用程序权限执行任意指令。 FFSystem OFFSystem 0.9.14 升级程序： OFFSystem OFFSystem 0.9.14 OFFSystem OFFSystem-0.19.14-src.tar.gz...

Owner Free File System Client Detection

The remote web server is an OFFSystem client. OFFSystem Owner-Free Filesystem is a distributed filesystem for peer-to-peer file sharing in which files are stored as randomized data blocks C Tenable Network Security, Inc. include"compat.inc"; if description scriptid33228; scriptversion"1.10";...