CVE-2004-0815

The unixcleanname function in Samba 2.2.x through 2.2.11, and 3.0.x before 3.0.2a, trims certain directory names down to absolute paths, which could allow remote attackers to bypass the specified share restrictions and read, write, or list arbitrary files via "/.////" style sequences in pathnames...

iDEFENSE Security Advisory 09.30.04 - Samba Arbitrary File Access Vulnerability

Samba Arbitrary File Access Vulnerability iDEFENSE Security Advisory 09.30.04 www.idefense.com/application/poi/display?id=146&type=vulnerabilities September 30, 2004 I. BACKGROUND Samba is an Open Source/Free Software suite that provides seamless file and print services to SMB/CIFS clients. II...

CVE-2002-0444

Microsoft Windows 2000 running the Terminal Server 90-day trial version, and possibly other versions, does not apply group policies to incoming users when the number of connections to the SYSVOL share exceeds the maximum, e.g. with a maximum number of licenses, which can allow remote authenticate...

CVE-2002-0444

Technical details about CVE-2002-0444 are not provided in the supplied documents. The description notes that Windows 2000 Terminal Server SYSVOL policy application can fail when connections exceed a maximum; monitor for official updates.

CVE-2002-1534

Macromedia Flash Player contains a vulnerability where a remote attacker can read arbitrary files by manipulating XML script inside a .swf hosted on a remote SMB share. The issue arises from how the SWF processes XML data from an SMB-based source, enabling file read access without local interacti...

SSH < 1.2.28 Kerberos NFS Share Ticket Disclosure

Binary data 1977.prm...

Easy File Share Virtual Folders Arbitrary File Access

Binary data 2147.prm...

CVE-2004-0741

CVE-2004-0741 affects LionMax Software WWW File Share Pro 2.60. The vulnerability allows remote attackers to cause a denial of service (crash or hang) by sending a long URL, potentially triggering a buffer overflow. The provided documents do not include exploitation details, affected versions bey...

dos_in_file_share_2.6

Hello bugtraq, LionMax Software WWW File Share Pro Remote Denial of Service Vulnerability remote Yes local No vulnerable WWW File Share Pro 2.60 download http://www.wfshome.com/download/wfssetup.exe WWW File Share Pro HTTP server may be prone to a remote denial of service condition. Successful...

WWW File Share Pro buffer overflow

Buffer overflow on oversized path in GET request...

CVE-2004-0480

Affected software: IBM Lotus Notes 6.0.3–6.5. Vulnerability: argument injection via a notes: URI that uses a UNC network share path to supply an alternate notes.ini for notes.exe, enabling remote code execution. Root cause (as described): insufficient argument filtering on the URI handler, allowi...

PT-2004-1599 · Ibm · Ibm Lotus Notes

Name of the Vulnerable Software and Affected Versions: IBM Lotus Notes versions 6.0.3 through 6.5 Description: The issue allows remote attackers to execute arbitrary code via a notes: URI that uses a UNC network share pathname to provide an alternate notes.ini configuration file to notes.exe. Thi...

Microsoft Windows XP - Self-Executing Folder

source: https://www.securityfocus.com/bid/10363/info A vulnerability has been reported in Microsoft Windows XP that may cause malicious code to run in the context of the currently logged-in user. The flaw exists in Windows Explorer and may allow executable content that is referenced from inside a...

Microsoft Windows XP - Self-Executing Folder

Microsoft Windows XP - Self-Executing Folder source: https://www.securityfocus.com/bid/10363/info A vulnerability has been reported in Microsoft Windows XP that may cause malicious code to run in the context of the currently logged-in user. The flaw exists in Windows Explorer and may allow...

Explorer / Internet Explorer buffer overflow

Buffer overflow on connection to network folder with oversized share name...

[Full-Disclosure] Microsoft&#39;s Explorer and Internet Explorer long share name buffer overflow.

Microsoft Explorer and Internet Explorer Long Share Name Buffer Overflow. Author: Rodrigo Gutierrez [email protected] Affected: MS Internet Explorer, MS Explorer explorer.exe Windows XPAll, Windows 2000All, Windows 98All, Windows meAll Not Tested: Windows 2003 Vendor Status: i notified the...

Microsoft Windows XP2000NT 4.0 - Shell Long Share Name Buffer Overrun

Microsoft Windows XP2000NT 4.0 - Shell Long Share Name Buffer Overrun source: https://www.securityfocus.com/bid/10213/info Microsoft Windows operating systems have been reported to be prone to a remotely exploitable buffer overrun condition. This issue is exposed when a client attempts to connect...

Microsoft Windows XP/2000/NT 4.0 - Shell Long Share Name Buffer Overrun

source: https://www.securityfocus.com/bid/10213/info Microsoft Windows operating systems have been reported to be prone to a remotely exploitable buffer overrun condition. This issue is exposed when a client attempts to connect to an SMB share with an overly long name. This may cause explorer.exe...

DSA-463 samba - privilege escalation

Bulletin has no description...

CVE-2004-0059

Directory traversal vulnerability in upload capability of WWW File Share Pro 2.42 and earlier allows remote attackers to overwrite arbitrary files via .. dot dot sequences in the filename parameter of a Content-Disposition: header...