CVE-2010-3759: Improper Control of Generation of Code

FastBackMount.exe in the Mount service in IBM Tivoli Storage Manager TSM FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 writes a certain value to a memory location specified by a UDP packet field, which allows remote attackers to execute arbitrary code via multiple requests. NOTE:...

IBM Tivoli Storage Manager FastBack Mount NULL Pointer Dereference DoS Vulnerability

This vulnerability allows remote attackers to deny service to clients on vulnerable installations of IBM Tivoli FastBack Storage Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the FastBackMount.exe component which listens by default on TCP...

IBM TSM FastBack Mount Service Arbitrary Overwrite Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM Tivoli Storage Manager Fastback. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Mount service FastBackMount.exe. This process listens by defau...

openSUSE Security Update : cifs-mount (openSUSE-SU-2010:0658-1)

A buffer overflow in the sidparse function of samba could potentially be exploited by remote attackers to execute arbitrary code CVE-2010-3069. Additionally the update also contains fixes for the following non-security issues: bnc567013 - Failed to join ADS Domain bnc592198 - Samba 3.0 / 3.2...

openSUSE Security Update : cifs-mount (openSUSE-SU-2010:0659-1)

A buffer overflow in the sidparse function of samba could potentially be exploited by remote attackers to execute arbitrary code CVE-2010-3069. Additionally the update also contains fixes for the following non-security issues: bnc573246 - mounted shares via mount.cifs disappear when dhclient rene...

Design/Logic Flaw

Unspecified vulnerability in the message-protocol implementation in the Mount service in IBM Tivoli Storage Manager TSM FastBack 5.x.x before 5.5.7, and 6.1.0.0, allows remote attackers to cause a denial of service recovery failure, and possibly trigger loss of data, via unknown vectors...

CVE-2010-3058: Undefined Security Weakness

The Mount service in IBM Tivoli Storage Manager TSM FastBack 5.x.x before 5.5.7, and 6.1.0.0, establishes an open UDP port, which might allow remote attackers to overwrite memory locations and execute arbitrary code, or cause a denial of service application hang, via unspecified vectors...

Design/Logic Flaw

The webdavmount function in webdavvfsops.c in the WebDAV kernel extension aka webdavfs.kext for Mac OS X 10.6 allows local users to cause a denial of service panic via a mount request with a large integer in the pasocketnamelen field...

CVE-2010-1794

The webdavmount function in webdavvfsops.c in the WebDAV kernel extension aka webdavfs.kext for Mac OS X 10.6 allows local users to cause a denial of service panic via a mount request with a large integer in the pasocketnamelen field...

SuSE Update for samba SUSE-SA:2010:025

Check for the Version of samba OpenVAS Vulnerability Test SuSE Update for samba SUSE-SA:2010:025 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

openSUSE Security Update : cifs-mount (openSUSE-SU-2010:0346-1)

"This update of the Samba server package fixes security issues and bugs. Following security issues were fixed: CVE-2010-2063: A buffer overrun was possible in chainreply code in 3.3.x and below, which could be used to crash the samba server or potentially execute code. CVE-2010-0787: Take extra...

openSUSE Security Update : cifs-mount (openSUSE-SU-2010:0346-1)

"This update of the Samba server package fixes security issues and bugs. Following security issues were fixed: CVE-2010-2063: A buffer overrun was possible in chainreply code in 3.3.x and below, which could be used to crash the samba server or potentially execute code. CVE-2010-0787: Take extra...

FreeBSD Kernel nfs_mount() Exploit

No description provided by source. / nfsmountex.c -- Patroklos Argyroudis, argp at domain census-labs.com Local kernel exploit for FreeBSD 8.0, 7.3 and 7.2. FreeBSD 8.0-RELEASE: Local kernel crash/denial-of-service. FreeBSD 7.3/7.2-RELEASE: Local privilege escalation. Discovered and exploited by...

FreeBSD Kernel nfs_mount() Exploit

Exploit for freebsd platform in category local exploits ================================== FreeBSD Kernel nfsmount Exploit ================================== / nfsmountex.c -- Patroklos Argyroudis, argp at domain census-labs.com Local kernel exploit for FreeBSD 8.0, 7.3 and 7.2. FreeBSD...

FreeBSD 8.07.37.2 - nfs_mount() Local Privilege Escalation

FreeBSD 8.07.37.2 - nfsmount Local Privilege Escalation / nfsmountex.c -- Patroklos Argyroudis, argp at domain census-labs.com Local kernel exploit for FreeBSD 8.0, 7.3 and 7.2. FreeBSD 8.0-RELEASE: Local kernel crash/denial-of-service. FreeBSD 7.3/7.2-RELEASE: Local privilege escalation...

FreeBSD 8.0/7.3/7.2 - 'nfs_mount()' Local Privilege Escalation

/ nfsmountex.c -- Patroklos Argyroudis, argp at domain census-labs.com Local kernel exploit for FreeBSD 8.0, 7.3 and 7.2. FreeBSD 8.0-RELEASE: Local kernel crash/denial-of-service. FreeBSD 7.3/7.2-RELEASE: Local privilege escalation. Discovered and exploited by Patroklos argp Argyroudis. The...

Debian DSA-2058-1 : glibc, eglibc - multiple vulnerabilities

Several vulnerabilities have been discovered in the GNU C Library aka glibc and its derivatives. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-1391, CVE-2009-4880, CVE-2009-4881 Maksymilian Arciemowicz discovered that the GNU C library did not...

CVE-2010-0296

The encodename macro in misc/mntentr.c in the GNU C Library aka glibc or libc6 2.11.1 and earlier, as used by ncpmount and mount.cifs, does not properly handle newline characters in mountpoint names, which allows local users to cause a denial of service mtab corruption, or possibly modify mount...

CVE-2010-0296

The encodename macro in misc/mntentr.c in the GNU C Library aka glibc or libc6 2.11.1 and earlier, as used by ncpmount and mount.cifs, does not properly handle newline characters in mountpoint names, which allows local users to cause a denial of service mtab corruption, or possibly modify mount...

Memory corruption

The encodename macro in misc/mntentr.c in the GNU C Library aka glibc or libc6 2.11.1 and earlier, as used by ncpmount and mount.cifs, does not properly handle newline characters in mountpoint names, which allows local users to cause a denial of service mtab corruption, or possibly modify mount...