Samba 3.6.x < 3.6.6 Remote Security Bypass

According to its banner, the version of Samba 3.6.x running on the remote host is earlier than 3.6.6, and as such, it is potentially affected by a remote security bypass vulnerability because it fails to properly enforce CIFS share attributes. This may allow a remote, authenticated attacker to...

Samba 3.6.x < 3.6.6 Remote Security Bypass

Binary data 6930.prm...

Samba 3.x < 3.6.4 / 3.5.14 / 3.4.16 RPC Multiple Buffer Overflows

Binary data 6443.prm...

(SWAT): Absent CSRF protection in various Samba web configuration formulars

Multiple cross-site request forgery CSRF vulnerabilities in the Samba Web Administration Tool SWAT in Samba 3.x before 3.5.10 allow remote attackers to hijack the authentication of administrators for requests that 1 shut down daemons, 2 start daemons, 3 add shares, 4 remove shares, 5 add printers...

DEBIAN-CVE-2011-2522

Multiple cross-site request forgery CSRF vulnerabilities in the Samba Web Administration Tool SWAT in Samba 3.x before 3.5.10 allow remote attackers to hijack the authentication of administrators for requests that 1 shut down daemons, 2 start daemons, 3 add shares, 4 remove shares, 5 add printers...

Samba 3.x < 3.3.13 SMB1 Packet Chaining Memory Corruption

Binary data 5572.prm...

Samba < 3.5.2 / 3.4.8 Multiple DoS

Binary data 5534.prm...

Samba 3.3.11 / 3.4.6 / 3.5.0 Security Bypass Vulnerability

Binary data 5360.prm...

Samba trans2open Overflow (Solaris SPARC)

$Id: trans2open.rb 7724 2009-12-06 05:50:37Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Samba lsa_io_trans_names Heap Overflow

This module triggers a heap overflow in the LSA RPC service of the Samba daemon. This module uses the TALLOC chunk overwrite method credit Ramon and Adriano, which only works with Samba versions 3.0.21-3.0.24. Additionally, this module will not work when the Samba "log level" parameter is higher...

Samba 3.2.0 - 3.2.6 Unauthorized Access

Binary data 4807.prm...

Samba "send_mailslot()" function buffer overflow

Overview The Samba "sendmailslot" function contains a stack-based buffer overflow vulnerability which could be exploited by a remote, unauthenticated attacker to execute arbitrary code. Description Samba is a widely used open-source implementation of Server Message Block SMB/Common Internet File...

Security fix for the ALT Linux 5 package samba version 3.0.28-alt1

Dec. 10, 2007 Alexander Bokovoy 3.0.28-alt1 - Fixed: + CVE-2007-6015: == Specifically crafted GETDC mailslot requests == can trigger a boundary error in the domain == controller GETDC mail slot support which == can be remotely exploited to execute arbitrary == code. + fix error path in local...

CVE-2007-4044

Rejected reason: The MS-RPC functionality in smbd in Samba 3 on SUSE Linux before 20070720 does not include "one character in the shell escape handling." NOTE: this issue was originally characterized as a shell metacharacter issue due to an incomplete fix for CVE-2007-2447, which was interpreted ...

DEBIAN-CVE-2007-2444

Logic error in the SID/Name translation functionality in smbd in Samba 3.0.23d through 3.0.25pre2 allows local users to gain temporary privileges and execute SMB/CIFS protocol operations via unspecified vectors that cause the daemon to transition to the root user...

Design/Logic Flaw

smbd in Samba 3.0.6 through 3.0.23d allows remote authenticated users to cause a denial of service memory and CPU exhaustion by renaming a file in a way that prevents a request from being removed from the deferred open queue, which triggers an infinite loop...

Samba < 3.0.22 Local File Permissions Credentials Disclosure

Binary data 3499.prm...

CVE-2004-2546

Multiple memory leaks in Samba before 3.0.6 allow attackers to cause a denial of service memory consumption...

security flaw

Samba 3.0.6 and earlier allows remote attackers to cause a denial of service infinite loop and memory exhaustion via certain malformed requests that cause new processes to be spawned and enter an infinite loop...

DEBIAN-CVE-2004-0807

Samba 3.0.6 and earlier allows remote attackers to cause a denial of service infinite loop and memory exhaustion via certain malformed requests that cause new processes to be spawned and enter an infinite loop...