CVE-2005-0923

The SmartScan feature in the Auto-Protect module for Symantec Norton AntiVirus 2004 and 2005, as also used in Internet Security 2004/2005 and System Works 2004/2005, allows attackers to cause a denial of service CPU consumption and system crash by renaming a file on a network share...

CVE-2005-0923

Symantec Norton AntiVirus 2004/2005 (including Internet Security 2004/2005 and System Works 2004/2005) contains a DoS vulnerability in the Auto-Protect module’s SmartScan feature. Renaming a file on a network share can trigger excessive CPU usage, leading to a system hang or crash. The issue affe...

CVE-2003-1122

CVE-2003-1122 affects ScriptLogic 4.01 and possibly earlier than 4.14. The related Nessus plugin confirms that the LOGS$ share is accessible and improperly permissioned, allowing remote readers/modifiers of logs and potentially execution of code. The CVE description notes insecure permissions tha...

WWW File Share Pro 2.72 - Local Password Disclosure

WWW File Share Pro 2.72 - Local Password Disclosure / WWW File Share Pro 2.72 Local Exploit by Kozan Application: WWW File Share Pro 2.72 Vendor:LionMax Software http://www.lionmax.com/ Vulnerable Description: WWW File Share Pro 2.72 discloses passwords to local users. Discovered & Coded by: Koza...

WWW File Share Pro 2.72 Local Password Disclosure Exploit

Exploit for unknown platform in category local exploits ========================================================= WWW File Share Pro 2.72 Local Password Disclosure Exploit ========================================================= / WWW File Share Pro 2.72 Local Exploit by Kozan Application: WWW...

WWW File Share Pro 2.72 - Local Password Disclosure

/ WWW File Share Pro 2.72 Local Exploit by Kozan Application: WWW File Share Pro 2.72 Vendor:LionMax Software http://www.lionmax.com/ Vulnerable Description: WWW File Share Pro 2.72 discloses passwords to local users. Discovered & Coded by: Kozan Credits to ATmaCA Web : www.netmagister.com Web2:...

CVE-2004-1541

SecureCRT 4.0, 4.1, and possibly other versions, allows remote attackers to execute arbitrary commands via a telnet:// URL that uses the /F option to specify a configuration file on a samba share...

CVE-2004-2730

Sysinternals PsTools before 2.05, including 1 PsExec before 1.54, 2 PsGetsid before 1.41, 3 PsInfo before 1.61, 4 PsKill before 1.03, 5 PsList before 1.26, 6 PsLoglist before 2.51, 7 PsPasswd before 1.21, 8 PsService before 2.12, 9 PsSuspend before 1.05, and 10 PsShutdown before 2.32, does not...

NFS Share User Mountable

Nessus was either able to mount some of the NFS shares exported by the remote server or disclose potentially sensitive information such as a directory listing. An attacker may exploit this issue to gain read and possibly write access to files on remote host. Note that root privileges were not...

[Full-Disclosure] Password Disclosure for SMB Shares in KDE's Konqueror

------------------------------------------------------------------------- | Password Disclosure for SMB Shares in KDE's Konqueror | ------------------------------------------------------------------------- Date: Nov. 29, 2004 Author: Daniel Fabian Product: KDE, Konquerer Vendor: KDE e. V...

KDE SMB share link cleartext password

SMB password is stored cleartext if desktop shortcut is created...

SecureCRT telnet URI Arbitrary Configuration Folder Remote Command Execution

The remote host is using a vulnerable version of SecureCRT, a SSH/Telnet client built for Microsoft Windows operation systems. It has been reported that SecureCRT does not safely check the protocol handler. As a result, an attacker may be able to exploit it by setting up a malicious SMB share. C...

CVE-2004-0815

The unixcleanname function in Samba 2.2.x through 2.2.11, and 3.0.x before 3.0.2a, trims certain directory names down to absolute paths, which could allow remote attackers to bypass the specified share restrictions and read, write, or list arbitrary files via "/.////" style sequences in pathnames...

DEBIAN-CVE-2004-0815

The unixcleanname function in Samba 2.2.x through 2.2.11, and 3.0.x before 3.0.2a, trims certain directory names down to absolute paths, which could allow remote attackers to bypass the specified share restrictions and read, write, or list arbitrary files via "/.////" style sequences in pathnames...

CVE-2004-0815

The unixcleanname function in Samba 2.2.x through 2.2.11, and 3.0.x before 3.0.2a, trims certain directory names down to absolute paths, which could allow remote attackers to bypass the specified share restrictions and read, write, or list arbitrary files via "/.////" style sequences in pathnames...

CVE-2004-0815

The unixcleanname function in Samba 2.2.x through 2.2.11, and 3.0.x before 3.0.2a, trims certain directory names down to absolute paths, which could allow remote attackers to bypass the specified share restrictions and read, write, or list arbitrary files via "/.////" style sequences in pathnames...

iDEFENSE Security Advisory 09.30.04 - Samba Arbitrary File Access Vulnerability

Samba Arbitrary File Access Vulnerability iDEFENSE Security Advisory 09.30.04 www.idefense.com/application/poi/display?id=146&type=vulnerabilities September 30, 2004 I. BACKGROUND Samba is an Open Source/Free Software suite that provides seamless file and print services to SMB/CIFS clients. II...

CVE-2002-0444

Microsoft Windows 2000 running the Terminal Server 90-day trial version, and possibly other versions, does not apply group policies to incoming users when the number of connections to the SYSVOL share exceeds the maximum, e.g. with a maximum number of licenses, which can allow remote authenticate...

CVE-2002-0444

Technical details about CVE-2002-0444 are not provided in the supplied documents. The description notes that Windows 2000 Terminal Server SYSVOL policy application can fail when connections exceed a maximum; monitor for official updates.

CVE-2002-1534

Macromedia Flash Player contains a vulnerability where a remote attacker can read arbitrary files by manipulating XML script inside a .swf hosted on a remote SMB share. The issue arises from how the SWF processes XML data from an SMB-based source, enabling file read access without local interacti...