23 matches found
PT-2026-65629
Name of the Vulnerable Software and Affected Versions samba affected versions not specified Description Authenticated LDAP access to internal LDB special DNs Distinguished Names allows for a complete domain takeover. This occurs when an authenticated user can access specific internal database...
PT-2026-65631
Name of the Vulnerable Software and Affected Versions Samba CTDB affected versions not specified Description Insufficient integrity validation of received CTDB protocol packets allows malformed packets containing invalid field lengths, improperly terminated strings, or inconsistent packet sizes t...
PT-2026-65630
Name of the Vulnerable Software and Affected Versions Samba Active Directory Domain Controller AD DC affected versions not specified Description An issue combining LDAP filter injection and improper authorization checks exists when processing LDAP Compare requests. The software fails to properly...
PT-2026-65627
Name of the Vulnerable Software and Affected Versions Samba affected versions not specified Description An out-of-bounds read flaw exists in the Kerberos Key Distribution Center KDC password change kpasswd service. The issue occurs when the server processes a malformed ASN.1-encoded Kerberos...
Nsasoft RemShutdown 安全漏洞
Nsasoft RemShutdown is a remote shutdown and management tool developed by the US company Nsasoft. Version 2.9.0.0 of Nsasoft RemShutdown contains a security vulnerability, which stems from a buffer overflow in the Name registration field. This vulnerability may lead to the application crashing...
CVE-2020-37205: Buffer Copy without Checking Size of Input
RemShutdown 2.9.0.0 contains a denial of service vulnerability that allows attackers to crash the application by overflowing the 'Name' registration field. Attackers can generate a 1000-character buffer payload and paste it into the registration name field to trigger an application crash...
UBUNTU-CVE-2025-10230
A flaw was found in Samba, in the front-end WINS hook handling: NetBIOS names from registration packets are passed to a shell without proper validation or escaping. Unsanitized NetBIOS name data from WINS registration packets are inserted into a shell command and executed by the Samba Active...
Implementation error in Namespace.fuse() leads to a wrong unicode representation
Lines of code Vulnerability details Impact The font class of a tile will be always considered as 0 emoji when a user registers a name. Proof of Concept To register a name, fuse is used taking as input the data of the characters. The name to register is a string created by converting the character...
SUSE CVE-2007-5398
Stack-based buffer overflow in the replynetbiospacket function in nmbd/nmbdpackets.c in nmbd in Samba 3.0.0 through 3.0.26a, when operating as a WINS server, allows remote attackers to execute arbitrary code via crafted WINS Name Registration requests followed by a WINS Name Query request...
PT-2022-28266
Name of the Vulnerable Software and Affected Versions Keycloak affected versions not specified Description A flaw in Keycloak allows for IDN homograph attacks, enabling a malicious user to register a name that already exists and then trick an admin into granting extra privileges. The highest thre...
PT-2021-20407
Name of the Vulnerable Software and Affected Versions: Red Hat Single Sign-On version 7.4 Description: A flaw was found in the software where IDN homograph attacks are possible, allowing a malicious user to register with a name already registered and potentially trick an administrator into granti...
CVE-2014-0183
CVE-2014-0183 affects Katello as shipped with Red Hat Subscription Asset Manager 1.4, vulnerable to cross-site scripting via HTML in the system name during registration. Root cause: HTML in system name not properly sanitized. Impact: potential XSS through the registration flow. Exploitation detai...
webdesignsolutions SQL Injection Vulnerability
Exploit for php platform in category web applications ============================================== webdesignsolutions SQL Injection Vulnerability ============================================== Web Design Solution, offering a wide range of affordable Web Design, Logo Design, online shopping syst...
SuSE Update for samba SUSE-SA:2007:065
Check for the Version of samba OpenVAS Vulnerability Test $Id: gbsuse2007065.nasl 8050 2017-12-08 09:34:29Z santu $ SuSE Update for samba SUSE-SA:2007:065 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; y...
CVE-2007-5398
Stack-based buffer overflow in the replynetbiospacket function in nmbd/nmbdpackets.c in nmbd in Samba 3.0.0 through 3.0.26a, when operating as a WINS server, allows remote attackers to execute arbitrary code via crafted WINS Name Registration requests followed by a WINS Name Query request...
CVE-2007-5398
Stack-based buffer overflow in the replynetbiospacket function in nmbd/nmbdpackets.c in nmbd in Samba 3.0.0 through 3.0.26a, when operating as a WINS server, allows remote attackers to execute arbitrary code via crafted WINS Name Registration requests followed by a WINS Name Query request...
DEBIAN-CVE-2007-5398
Stack-based buffer overflow in the replynetbiospacket function in nmbd/nmbdpackets.c in nmbd in Samba 3.0.0 through 3.0.26a, when operating as a WINS server, allows remote attackers to execute arbitrary code via crafted WINS Name Registration requests followed by a WINS Name Query request...
Stack overflow
Stack-based buffer overflow in the replynetbiospacket function in nmbd/nmbdpackets.c in nmbd in Samba 3.0.0 through 3.0.26a, when operating as a WINS server, allows remote attackers to execute arbitrary code via crafted WINS Name Registration requests followed by a WINS Name Query request...
CVE-2007-5398
Stack-based buffer overflow in the replynetbiospacket function in nmbd/nmbdpackets.c in nmbd in Samba 3.0.0 through 3.0.26a, when operating as a WINS server, allows remote attackers to execute arbitrary code via crafted WINS Name Registration requests followed by a WINS Name Query request...
CVE-2007-5398: Improper Restriction of Operations within the Bounds of a Memory Buffer
Stack-based buffer overflow in the replynetbiospacket function in nmbd/nmbdpackets.c in nmbd in Samba 3.0.0 through 3.0.26a, when operating as a WINS server, allows remote attackers to execute arbitrary code via crafted WINS Name Registration requests followed by a WINS Name Query request...