Design/Logic Flaw

The Auto Local Logon feature in Check Point VPN-1 SecuRemote/SecureClient NGX R60 and R56 for Windows caches credentials under the Checkpoint\SecuRemote registry key, which has Everyone/Full Control permissions, which allows local users to gain privileges by reading and reusing the credentials...

CVE-2008-0662

CVE-2008-0662 affects Check Point VPN-1 SecuRemote/SecureClient NGX for Windows (R60 and R56). The Auto Local Logon feature caches credentials in the Checkpoint\SecuRemote registry key which has Everyone/Full Control permissions, enabling local users to read and reuse credentials to gain privileg...

PT-2008-2284 · Check Point · Check Point Vpn-1 Securemote/Secureclient

Name of the Vulnerable Software and Affected Versions: Check Point VPN-1 SecuRemote/SecureClient NGX versions R56 and R60 Description: The issue concerns the Auto Local Logon feature, which caches credentials in a registry key with inadequate permissions, allowing local users to read and reuse...

SecureClient NGX R60 HFA 02 Supplement 2 protects against Auto Local Logon vulnerability (CVE-2008-0662)

...

Null pointer dereference

telnetd.exe in Pragma TelnetServer 7.0.4.589 allows remote attackers to cause a denial of service process crash and resource exhaustion via a crafted TELOPT PRAGMA LOGON telnet option, which triggers a NULL pointer dereference...

CVE-2008-0153

telnetd.exe in Pragma TelnetServer 7.0.4.589 allows remote attackers to cause a denial of service process crash and resource exhaustion via a crafted TELOPT PRAGMA LOGON telnet option, which triggers a NULL pointer dereference...

Pragma TelnetServer DoS

NULL pointer dereference on TELOPT PRAGMA LOGON telnet option...

Ubuntu 6.06 LTS / 6.10 / 7.04 / 7.10 : samba vulnerability (USN-556-1)

Alin Rad Pop discovered that Samba did not correctly check the size of reply packets to mailslot requests. If a server was configured with domain logon enabled, an unauthenticated remote attacker could send a specially crafted domain logon packet and execute arbitrary code or crash the Samba...

Samba buffer overflow

Buffer overflow in sendmailslot on parsing domain logon request...

Samba 3.0.27a send_mailslot() Remote Buffer Overflow PoC

Exploit for linux platform in category dos / poc ======================================================== Samba 3.0.27a sendmailslot Remote Buffer Overflow PoC ======================================================== / http://secunia.com/secuniaresearch/2007-99/advisory/ A remote attacker could...

Samba 3.0.27a - send_mailslot() Remote Buffer Overflow

Samba 3.0.27a - sendmailslot Remote Buffer Overflow / http://secunia.com/secuniaresearch/2007-99/advisory/ A remote attacker could send a specially crafted "SAMLOGON" domain logon packet, possibly leading to the execution of arbitrary code with elevated privileges. Note that this vulnerability is...

Samba 3.0.27a - 'send_mailslot()' Remote Buffer Overflow

/ http://secunia.com/secuniaresearch/2007-99/advisory/ A remote attacker could send a specially crafted "SAMLOGON" domain logon packet, possibly leading to the execution of arbitrary code with elevated privileges. Note that this vulnerability is exploitable only when domain logon support is enabl...

CVE-2007-6015

Stack-based buffer overflow in the sendmailslot function in nmbd in Samba 3.0.0 through 3.0.27a, when the "domain logons" option is enabled, allows remote attackers to execute arbitrary code via a GETDC mailslot request composed of a long GETDC string following an offset username in a SAMLOGON...

CVE-2007-6015

Stack-based buffer overflow in the sendmailslot function in nmbd in Samba 3.0.0 through 3.0.27a, when the "domain logons" option is enabled, allows remote attackers to execute arbitrary code via a GETDC mailslot request composed of a long GETDC string following an offset username in a SAMLOGON...

DEBIAN-CVE-2007-6015

Stack-based buffer overflow in the sendmailslot function in nmbd in Samba 3.0.0 through 3.0.27a, when the "domain logons" option is enabled, allows remote attackers to execute arbitrary code via a GETDC mailslot request composed of a long GETDC string following an offset username in a SAMLOGON...

Cross site scripting

Cross-site scripting XSS vulnerability in the logon page in Web Reporting Tools portal in Websense Enterprise and Web Security Suite 6.3 allows remote attackers to inject arbitrary web script or HTML via the username field...

GLSA-200712-10 : Samba: Execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200712-10 Samba: Execution of arbitrary code Alin Rad Pop Secunia Research discovered a boundary checking error in the sendmailslot function which could lead to a stack-based buffer overflow. Impact : A remote attacker could send ...

samba: send_mailslot() buffer overflow

Stack-based buffer overflow in the sendmailslot function in nmbd in Samba 3.0.0 through 3.0.27a, when the "domain logons" option is enabled, allows remote attackers to execute arbitrary code via a GETDC mailslot request composed of a long GETDC string following an offset username in a SAMLOGON...

Samba: Execution of arbitrary code

Background Samba is a suite of SMB and CIFS client/server programs for UNIX. Description Alin Rad Pop Secunia Research discovered a boundary checking error in the sendmailslot function which could lead to a stack-based buffer overflow. Impact A remote attacker could send a specially crafted...

Samba < 3.0.27 Multiple Vulnerabilities

According to its banner, the version of the Samba server on the remote host contains a boundary error in the 'replynetbiospacket' function in 'nmbd/nmbdpackets.c' when sending NetBIOS replies. Provided the server is configured to run as a WINS server, a remote attacker can exploit this issue by...