CVE-2001-1110

CVE-2001-1110 (EFTP 2.0.7.337) is documented as a remote-attack vulnerability where an attacker can obtain NETBIOS credentials by requesting information on a file in a network share, causing the server to send credentials to the share owner’s host and enabling the attacker to sniff the connection...

Samba NETBIOS Name Traversal Arbitrary Remote File Creation

The remote Samba server, according to its version number, allows creation of arbitrary remote files. This vulnerability allows an attacker to overwrite arbitrary files by supplying an arbitrarily formed NetBIOS machine name to this server, and to potentially become root on the remote server. An...

CVE-2001-1110

EFTP 2.0.7.337 allows remote attackers to obtain NETBIOS credentials by requesting information on a file that is in a network share, which causes the server to send the credentials to the host that owns the share, and allows the attacker to sniff the connection...

FreeBSD-SA-01:45.samba

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-01:45 Security Advisory FreeBSD, Inc. Topic: samba Category: ports Module: samba Announced: 2001-07-10 Credits: Michal Zalewski Affects: Ports collection prior to the...

Проблема с лог-файлом в Samba (directory traversal)

При использовании лог-файлов с именами соответствующими NETBIOS-именам компьютером, если имся компьютера содержит ../ - будет перезаписан файл в директории более высокого уровня. NETBIOS-имя может содержать до 15 символов...

[SECURITY] [DSA-065-1] samba remote file append/creation problem

Package : samba Problem type : remote file append/creation Debian-specific: no Michal Zalewski discovered that samba does not properly validate NetBIOS names from remote machines. By itself that is not a problem, except if Samba is configure to write log-files to a file that includes the NetBIOS...

CVE-2001-0264

Gene6 G6 FTP Server 2.0 aka BPFTP Server 2.10 allows remote attackers to obtain NETBIOS credentials by requesting information on a file that is in a network share, which causes the server to send the credentials to the host that owns the share, and allows the attacker to sniff the connection...

CVE-2001-0264

Gene6 G6 FTP Server 2.0 aka BPFTP Server 2.10 allows remote attackers to obtain NETBIOS credentials by requesting information on a file that is in a network share, which causes the server to send the credentials to the host that owns the share, and allows the attacker to sniff the connection...

CVE-2001-0264

Summary (CVE-2001-0264): Gene6 G6 FTP Server 2.0 (also BPFTP Server 2.10) exposes NetBIOS credentials when information about a file in a network share is requested, causing the server to send credentials to the share owner’s host and enabling eavesdropping. Affected component: BPFTP/G6 FTP Server...

@stake Security Advisory: G6 FTP File Existence Disclosure and Netbios Hash Retrieval (A040301-1)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 @stake, Inc. www.atstake.com Security Advisory Notification Advisory Name: G6 FTP File Existence Disclosure and Netbios Hash Retrieval Release Date: 04/03/2001 Application: G6 FTP Server v2.0 exploit and example, other applications vulnerable to Netbi...

CVE-2000-1003

NETBIOS client in Windows 95 and Windows 98 allows a remote attacker to cause a denial of service by changing a file sharing service to return an unknown driver type, which causes the client to crash...

CVE-2000-1003

CVE-2000-1003 (Windows 95/98 NETBIOS client) : The NETBIOS client in Windows 95 and Windows 98 is affected. A remote attacker over a network can cause a denial of service by altering a file sharing service to return an unknown driver type, which crashes the client. Root cause described as the fil...

CVE-2000-1003

NETBIOS client in Windows 95 and Windows 98 allows a remote attacker to cause a denial of service by changing a file sharing service to return an unknown driver type, which causes the client to crash...

DoS против NetBIOS/TCP/IP - NBT flood

Постоянная отправка намеренно поврежденных пакетов приводит к отказу в обслуживании NetBIOS - клиентов...

CVE-2000-1079

Affected software/hardware: Microsoft Windows 95, 98, NT, and 2000. Vulnerability: Interaction between the CIFS Browser Protocol and NetBIOS allows remote modification of dynamic NetBIOS name cache entries via a spoofed Browse Frame Request carried in a unicast or UDP broadcast datagram. Impact: ...

CVE-2000-1079

Interactions between the CIFS Browser Protocol and NetBIOS as implemented in Microsoft Windows 95, 98, NT, and 2000 allow remote attackers to modify dynamic NetBIOS name cache entries via a spoofed Browse Frame Request in a unicast or UDP broadcast datagram...

Re:

Доброе время суток Учёный Кот!!! Ситуация воспроизводиться следующим образом. Включается NetXray на отловку пакетов желательно настроенно только на атакуемую машину и при обычной попытки зайти на компбютер жертвы ловиться пакет тип NetBIOS,расшифровка в NetXray: Session Request-Called Name: Cyber...

DoS против Windows 95/98/ME - NetBIOS driver

При соединении клиента с сервером по netBIOS некорректный ответ сервера приводит к краху ОС...

NSFOCUS SA2000-05: Microsoft Windows 9x NETBIOS password verification vulnerability

NSFOCUS Security AdvisorySA2000-05 TopicЈє Microsoft Windows 9x NETBIOS password verification vulnerability Release DateЈє August 24, 2000 Update DateЈє Oct 11 , 2000 Affected SystemЈє ================ - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows 98 Second Edition - Microsoft...

NSFOCUS SA2000-04: Microsoft Win9x client driver type comparing vulnerability

NSFOCUS Security AdvisorySA2000-04 TopicёєMicrosoft Win9x client driver type comparing vulnerability Release Dateёє Aug 20, 2000 Update Dateёє Oct 11, 2000 Affected System: ================ - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows 98 Second Edition Non-affected systemёє...