Lucene search
+L

11561 matches found

BDU FSTEC
BDU FSTEC
added 2021/03/15 12:00 a.m.7 views

The vulnerability of the MS-SAMR and MS-LSAD protocols in the Samba networking software suite is related to security flaws. This allows attackers to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the MS-SAMR and MS-LSAD protocols in the Samba networking software package is related to security flaws. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, compromise its integrity, and cause service failures...

9.3CVSS6.6AI score0.3693EPSS
SaveExploits0References11Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/03/15 12:00 a.m.10 views

The vulnerability of the clidfs.c, libsmb_server.c, and smbXcli_base.c components of the Samba network communication software package lies in the lack of a mechanism to verify input data. This allows attackers to compromise the integrity of the data.

The vulnerability of the clidfs.c, libsmbserver.c, and smbXclibase.c components of the Samba network communication software package is related to a lack of mechanisms for checking input data. Exploiting this vulnerability could allow an attacker to compromise the integrity of data...

5.4CVSS6.6AI score0.07263EPSS
SaveExploits0References10Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/03/15 12:00 a.m.8 views

The vulnerability of the Samba networking software server’s LDAP server lies in a resource management mechanism error, which allows attackers to cause service failures.

The vulnerability of the Samba networking software’s LDAP server is related to a resource management mechanism error. Exploiting this vulnerability can allow an attacker to cause service failures...

7.5CVSS6.6AI score0.07116EPSS
SaveExploits0References9Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/03/15 12:00 a.m.12 views

The vulnerability of the Active Directory Domain Controller (AD DC) in the Samba networking software package arises from a lack of privilege control mechanisms and access management tools. This vulnerability allows attackers to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the Active Directory Domain Controller AD DC in the Samba networking software package is related to the lack of privilege control mechanisms and access management tools. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its...

8.5CVSS7.2AI score0.04264EPSS
SaveExploits0References7Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/03/15 12:00 a.m.7 views

The vulnerability of the DCE/RPC-based networking interaction package for Samba lies in its information disclosure capabilities, which allow attackers to compromise data integrity.

The vulnerability of the DCE/RPC-based networking communication package for Samba is related to a implementation error at the DCE-RPC level. Exploiting this vulnerability allows an attacker to compromise data integrity remotely...

5.9CVSS6.5AI score0.19103EPSS
SaveExploits0References13Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/03/15 12:00 a.m.8 views

The vulnerability of the NTLMSSP implementation of the Samba networking communication package is related to security flaws, allowing attackers to compromise data integrity.

The vulnerability of the NTLMSSP implementation of the Samba networking communication package is related to security flaws. Exploiting this vulnerability allows a malicious actor to compromise data integrity remotely...

5.9CVSS6.6AI score0.08305EPSS
SaveExploits0References12Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/03/15 12:00 a.m.9 views

The vulnerability of the NETLOGON service in the Samba networking software package, due to security flaws, allows attackers to access confidential data and compromise its integrity.

The vulnerability of the NETLOGON service in the Samba networking software package is related to security flaws. Exploiting this vulnerability can allow an attacker to gain access to confidential data and compromise its integrity...

6.4CVSS6.6AI score0.02902EPSS
SaveExploits0References11Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/03/15 12:00 a.m.8 views

The vulnerability of the libldb library in the Samba networking software package, related to information disclosure, allows attackers to gain access to confidential data.

The vulnerability of the libldb library in the Samba networking software package relates to information disclosure. Exploiting this vulnerability could allow a malicious actor to gain access to confidential data remotely...

7.5CVSS7.1AI score0.06114EPSS
SaveExploits0References13Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/03/15 12:00 a.m.11 views

The vulnerability of the SMB1 protocol implementation in Samba network communication software is related to security flaws, allowing attackers to compromise data integrity.

The vulnerability of the SMB1 protocol implementation in the Samba networking software package is related to security flaws. Exploiting this vulnerability allows a malicious actor to compromise data integrity remotely...

5.9CVSS6.6AI score0.02601EPSS
SaveExploits0References9Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/03/15 12:00 a.m.9 views

The vulnerability of the shadow_copy2_get_shadow_copy_data function in the Samba networking communication software package, related to information disclosure, allows a perpetrator to gain access to confidential data.

The vulnerability of the shadowcopy2getshadowcopydata function in the Samba networking communication software package is related to the disclosure of information. Exploiting this vulnerability could allow a malicious actor to gain access to confidential data remotely...

5.3CVSS6.6AI score0.13584EPSS
SaveExploits0References8Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/03/15 12:00 a.m.9 views

The vulnerability of the vfs_streams_depot or vfs_streams_xattr functions in the Samba networking communication package allows a hacker to gain access to confidential data and compromise its integrity.

The vulnerability of the vfsstreamsdepot or vfsstreamsxattr functions in Samba networking applications is related to the lack of mechanisms for privilege control and access management. Exploiting this vulnerability can allow an attacker to gain access to confidential data and compromise its...

5.4CVSS7.4AI score0.09017EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/03/15 12:00 a.m.8 views

The vulnerability of the ndr_pull_dnsp_name parser in the Samba networking software package arises from allowing output operations to exceed the allowable buffer data size. This allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the ndrpulldnspname parser in the Samba networking software package is related to the execution of operations within acceptable data buffer limits. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, and cause...

8.8CVSS7.8AI score0.06226EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/03/15 12:00 a.m.7 views

The vulnerability of the Samba networking communication package is related to deficiencies in the cryptographic security mechanism, allowing attackers to gain access to confidential data.

The vulnerability of the Samba networking communication package is related to deficiencies in the cryptographic security mechanism. Exploiting this vulnerability can allow an attacker to gain access to confidential data...

3.2CVSS7.1AI score0.00435EPSS
SaveExploits0References6Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/03/15 12:00 a.m.9 views

The vulnerability of the ncacn_np function in the Samba networking software package, related to security vulnerabilities, allows attackers to compromise data integrity.

The vulnerability of the ncacnnp function in the Samba networking software package is related to security flaws. Exploiting this vulnerability allows a malicious actor to compromise data integrity remotely...

5.9CVSS6.6AI score0.10232EPSS
SaveExploits0References11Affected Software3
RedhatCVE
RedhatCVE
added 2021/03/13 10:06 p.m.88 views

CVE-2017-7494

A remote code execution flaw was found in Samba. A malicious authenticated samba client, having write access to the samba share, could use this flaw to execute arbitrary code as root. Mitigation Any of the following: 1. SELinux is enabled by default and our default policy prevents loading of...

10CVSS2.6AI score0.99448EPSS
SaveExploits26References2
OpenVAS
OpenVAS
added 2021/03/12 12:00 a.m.28 views

Huawei EulerOS: Security Advisory for samba (EulerOS-SA-2021-1625)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS7.2AI score0.99389EPSS
SaveExploits76References4
OpenVAS
OpenVAS
added 2021/03/12 12:00 a.m.8 views

Huawei EulerOS: Security Advisory for cifs-utils (EulerOS-SA-2021-1664)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7CVSS7AI score0.00652EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2021/03/12 12:00 a.m.24 views

Huawei EulerOS: Security Advisory for libldb (EulerOS-SA-2021-1606)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS7.2AI score0.0244EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2021/03/12 12:00 a.m.31 views

Huawei EulerOS: Security Advisory for samba (EulerOS-SA-2021-1635)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS7.1AI score0.99389EPSS
SaveExploits76References4
Tenable Nessus
Tenable Nessus
added 2021/03/11 12:00 a.m.24 views

EulerOS Virtualization 2.9.0 : cifs-utils (EulerOS-SA-2021-1664)

According to the version of the cifs-utils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - It was found that cifs-utils' mount.cifs was invoking a shell when requesting the Samba password, which could be used to inject...

7CVSS6.3AI score0.00652EPSS
SaveExploits1References2
Rows per page
Query Builder