CVE-2009-3623

The lookupcbcred function in fs/nfsd/nfs4callback.c in the nfsd4 subsystem in the Linux kernel before 2.6.31.2 attempts to access a credentials cache even when a client specifies the AUTHNULL authentication flavor, which allows remote attackers to cause a denial of service NULL pointer dereferenc...

CVE-2009-3623

The lookupcbcred function in fs/nfsd/nfs4callback.c in the nfsd4 subsystem in the Linux kernel before 2.6.31.2 attempts to access a credentials cache even when a client specifies the AUTHNULL authentication flavor, which allows remote attackers to cause a denial of service NULL pointer dereferenc...

openSUSE 10 Security Update : cifs-mount (cifs-mount-6519)

samba's makeconnectionsnum handles certain input incorrectly, which may lead to disclosure of the root directory. CVE-2009-2813 has been assigned to this issue. Additionally an information disclosure vulnerability in mount.cifs has been fixed CVE-2009-2948 as well as a DoS condition CVE-2009-2906...

samba: information disclosure in suid mount.cifs

mount.cifs in Samba 3.0 before 3.0.37, 3.2 before 3.2.15, 3.3 before 3.3.8 and 3.4 before 3.4.2, when mount.cifs is installed suid root, does not properly enforce permissions, which allows local users to read part of the credentials file and obtain the password by specifying the path to the...

SUSE: Security Summary (SUSE-SR:2009:017)

The remote host is missing updates announced in advisory SUSE-SR:2009:017. SuSE Security Summaries are short on detail when it comes to the names of packages affected by a particular bug. Because of this, while this test will detect out of date packages, it cannot tell you what bugs impact which...

SLES11: Security update for Samba

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: cifs-mount ldapsmb libsmbclient0 libtalloc1 libtdb1 libwbclient0 samba samba-client samba-krb-printing samba-winbind More details may also be found by...

openSUSE Security Update : cifs-mount (cifs-mount-1354)

samba's makeconnectionsnum handles certain input incorrectly, which may lead to disclosure of the root directory. CVE-2009-2813 has been assigned to this issue. Additionally an information disclosure vulnerability in mount.cifs has been fixed CVE-2009-2948 as well as a DoS condition CVE-2009-2906...

openSUSE Security Update : cifs-mount (cifs-mount-1354)

samba's makeconnectionsnum handles certain input incorrectly, which may lead to disclosure of the root directory. CVE-2009-2813 has been assigned to this issue. Additionally an information disclosure vulnerability in mount.cifs has been fixed CVE-2009-2948 as well as a DoS condition CVE-2009-2906...

PT-2009-5258

Name of the Vulnerable Software and Affected Versions: Linux kernel version 2.6.31 Description: The issue allows local users to cause a denial of service and possibly execute arbitrary code via unspecified vectors that cause a "negative dentry" and trigger a NULL pointer dereference. This can be...

SLES10: Security update for Samba

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: cifs-mount libmsrpc libmsrpc-devel libsmbclient libsmbclient-devel samba samba-client samba-krb-printing samba-python samba-vscan samba-winbind More details...

SLES10: Security update for Samba

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: cifs-mount libmsrpc libmsrpc-devel libsmbclient libsmbclient-devel samba samba-client samba-krb-printing samba-python samba-vscan samba-winbind More details...

SLES10: Security update for Samba

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: cifs-mount libmsrpc libmsrpc-devel libsmbclient libsmbclient-devel samba samba-client samba-doc samba-krb-printing samba-pdb samba-python samba-vscan...

SLES11: Security update for Samba

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: cifs-mount ldapsmb libsmbclient0 libtalloc1 libtdb1 libwbclient0 samba samba-client samba-krb-printing samba-winbind More details may also be found by...

gfs2-utils security and bug fix update

0.1.62-1 - Fix man page references to fsck.gfs2. - Resolves: rhbz477072 0.1.61-1 - fsck.gfs2 no longer segfaults when fixing 'EA leaf block type' problems. - Resolves: rhbz510758 0.1.60-1 - When '/' is a gfs2 file system it is now properly mounted without an error. - Resolves: rhbz507893 0.1.59-1...

Low: Red Hat Security Advisory: nfs-utils security and bug fix update

An updated nfs-utils package that fixes a security issue and several bugs is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The nfs-utils package provides a daemon for the kernel NFS server and related tools. It was discovered that...

Debian Security Advisory DSA 1865-1 (linux-2.6)

The remote host is missing an update to linux-2.6 announced via advisory DSA 1865-1. OpenVAS Vulnerability Test $Id: deb18651.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1865-1 linux-2.6 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

kernel: cifs: memory overwrite when saving nativeFileSystem field during mount

Buffer overflow in fs/cifs/connect.c in CIFS in the Linux kernel 2.6.29 and earlier allows remote attackers to cause a denial of service crash via a long nativeFileSystem field in a Tree Connect response to an SMB mount request...

openSUSE Security Update : cifs-mount (cifs-mount-406)

This update fixes a bug that allowed the client to retrieve arbitrary memory content from the server process. CVE-2008-4314 Additionally another bug was fixed that affects environments that enabled registry shares by setting 'registry shares = yes'. In this case an authenticated user is...

openSUSE Security Update : cifs-mount (cifs-mount-320)

Malicious clients could potentially retrieve arbitrary memory content from a samba server CVE-2008-4314. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update cifs-mount-320. The text description of...

openSUSE Security Update : cifs-mount (cifs-mount-410)

This update fixes a bug that allowed the client to retrieve arbitrary memory content from the server process. CVE-2008-4314 Additionally another bug was fixed that affects environments that enabled registry shares by setting 'registry shares = yes'. In this case an authenticated user is...