355 matches found
Samba: Stack-based buffer overflow by processing specially-crafted SID records
Stack-based buffer overflow in the 1 sidparse and 2 domsidparse functions in Samba before 3.5.5 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted Windows Security ID SID on a file share...
DEBIAN-CVE-2007-2444
Logic error in the SID/Name translation functionality in smbd in Samba 3.0.23d through 3.0.25pre2 allows local users to gain temporary privileges and execute SMB/CIFS protocol operations via unspecified vectors that cause the daemon to transition to the root user...
security flaw
The selinuxptrace logic in hooks.c in SELinux for Linux 2.6.6 allows local users with ptrace permissions to change the tracer SID to an SID of another process...
SMB Use Host SID to Enumerate Local Users
Using the host security identifier SID, Nessus was able to enumerate local users on the remote Windows system. C Tenable Network Security, Inc. @PREFERENCES@ include"compat.inc"; if description scriptid10860; scriptversion"1.62"; scriptsetattributeattribute:"pluginmodificationdate",...
Microsoft Windows SMB LsaQueryInformationPolicy Function SID Enumeration
By emulating the call to LsaQueryInformationPolicy, it was possible to obtain the host SID Security Identifier. The host SID can then be used to get the list of local users. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10859; scriptversion"1.47";...
SMB Use Domain SID to Enumerate Users
Using the domain security identifier SID, Nessus was able to enumerate the domain users on the remote Windows system. C Tenable Network Security, Inc. @PREFERENCES@ include"compat.inc"; if description scriptid10399; scriptversion"1.82"; scriptcvsdate"Date: 2020/01/07"; scriptnameenglish:"SMB Use...
Microsoft Windows SMB LsaQueryInformationPolicy Function NULL Session Domain SID Enumeration
By making or emulating a call to LsaQueryInformationPolicy, it was possible to obtain the domain SID Security Identifier. The domain SID can then be used to get the list of users of the domain. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10398; scriptversion"1.59"...
CVE-1999-0995
The CVE-1999-0995 entry affects Microsoft Windows NT, specifically the Local Security Authority (LSA). The vulnerability arises from malformed arguments passed to the LsaLookupSids function (which looks up a Security Identifier), enabling remote attackers to cause a denial of service. This is the...
CVE-1999-0995
Windows NT Local Security Authority LSA allows remote attackers to cause a denial of service via malformed arguments to the LsaLookupSids function which looks up the SID, aka "Malformed Security Identifier Request."...
CVE-2025-34595
This CVE entry is rejected/not used and does not represent an active vulnerability.
MS:B90C6608-1562-42B3-A665-18A5BFCE7A22
...
MS:0A541419-914D-4E57-93FB-5D51A0049EC7
...
MS:6D9F1993-2A14-45EE-A2E4-7551BC6ECCA3
...
MS:7B1FCBEA-5424-440C-A798-D41C498C032E
...
MS:F09B6610-755F-4526-AFAD-7BC53766CE31
...
MS:5C4ABCE6-842A-4A64-8585-557AD75893AA
...
MS:0452F24A-10CB-4333-B847-2997F764CC79
...
MS:412F9537-DA40-4998-BD7C-7CD85FEB34FB
...