CVE-2003-1122: Undefined Security Weakness

ScriptLogic 4.01, and possibly other versions before 4.14, uses insecure permissions for the LOGS$ share, which allows users to modify log records and possibly execute arbitrary code...

WWW File Share Pro 2.72 Local Password Disclosure Exploit

Exploit for unknown platform in category local exploits ========================================================= WWW File Share Pro 2.72 Local Password Disclosure Exploit ========================================================= / WWW File Share Pro 2.72 Local Exploit by Kozan Application: WWW...

WWW File Share Pro 2.72 - Local Password Disclosure

WWW File Share Pro 2.72 - Local Password Disclosure / WWW File Share Pro 2.72 Local Exploit by Kozan Application: WWW File Share Pro 2.72 Vendor:LionMax Software http://www.lionmax.com/ Vulnerable Description: WWW File Share Pro 2.72 discloses passwords to local users. Discovered & Coded by: Koza...

WWW File Share Pro 2.72 - Local Password Disclosure

/ WWW File Share Pro 2.72 Local Exploit by Kozan Application: WWW File Share Pro 2.72 Vendor:LionMax Software http://www.lionmax.com/ Vulnerable Description: WWW File Share Pro 2.72 discloses passwords to local users. Discovered & Coded by: Kozan Credits to ATmaCA Web : www.netmagister.com Web2:...

CVE-2004-1541: Undefined Security Weakness

SecureCRT 4.0, 4.1, and possibly other versions, allows remote attackers to execute arbitrary commands via a telnet:// URL that uses the /F option to specify a configuration file on a samba share...

CVE-2004-2730

Sysinternals PsTools before 2.05, including 1 PsExec before 1.54, 2 PsGetsid before 1.41, 3 PsInfo before 1.61, 4 PsKill before 1.03, 5 PsList before 1.26, 6 PsLoglist before 2.51, 7 PsPasswd before 1.21, 8 PsService before 2.12, 9 PsSuspend before 1.05, and 10 PsShutdown before 2.32, does not...

CVE-2004-1541

SecureCRT 4.0, 4.1, and possibly other versions, allows remote attackers to execute arbitrary commands via a telnet:// URL that uses the /F option to specify a configuration file on a samba share...

NFS Share User Mountable

Nessus was either able to mount some of the NFS shares exported by the remote server or disclose potentially sensitive information such as a directory listing. An attacker may exploit this issue to gain read and possibly write access to files on remote host. Note that root privileges were not...

KDE SMB share link cleartext password

SMB password is stored cleartext if desktop shortcut is created...

[Full-Disclosure] Password Disclosure for SMB Shares in KDE's Konqueror

------------------------------------------------------------------------- | Password Disclosure for SMB Shares in KDE's Konqueror | ------------------------------------------------------------------------- Date: Nov. 29, 2004 Author: Daniel Fabian Product: KDE, Konquerer Vendor: KDE e. V...

SecureCRT telnet URI Arbitrary Configuration Folder Remote Command Execution

The remote host is using a vulnerable version of SecureCRT, a SSH/Telnet client built for Microsoft Windows operation systems. It has been reported that SecureCRT does not safely check the protocol handler. As a result, an attacker may be able to exploit it by setting up a malicious SMB share. C...

CVE-2004-0815

The unixcleanname function in Samba 2.2.x through 2.2.11, and 3.0.x before 3.0.2a, trims certain directory names down to absolute paths, which could allow remote attackers to bypass the specified share restrictions and read, write, or list arbitrary files via "/.////" style sequences in pathnames...

CVE-2004-0815

The unixcleanname function in Samba 2.2.x through 2.2.11, and 3.0.x before 3.0.2a, trims certain directory names down to absolute paths, which could allow remote attackers to bypass the specified share restrictions and read, write, or list arbitrary files via "/.////" style sequences in pathnames...

DEBIAN-CVE-2004-0815

The unixcleanname function in Samba 2.2.x through 2.2.11, and 3.0.x before 3.0.2a, trims certain directory names down to absolute paths, which could allow remote attackers to bypass the specified share restrictions and read, write, or list arbitrary files via "/.////" style sequences in pathnames...

CVE-2004-0815

The unixcleanname function in Samba 2.2.x through 2.2.11, and 3.0.x before 3.0.2a, trims certain directory names down to absolute paths, which could allow remote attackers to bypass the specified share restrictions and read, write, or list arbitrary files via "/.////" style sequences in pathnames...

iDEFENSE Security Advisory 09.30.04 - Samba Arbitrary File Access Vulnerability

Samba Arbitrary File Access Vulnerability iDEFENSE Security Advisory 09.30.04 www.idefense.com/application/poi/display?id=146&type=vulnerabilities September 30, 2004 I. BACKGROUND Samba is an Open Source/Free Software suite that provides seamless file and print services to SMB/CIFS clients. II...

CVE-2002-0444

Technical details about CVE-2002-0444 are not provided in the supplied documents. The description notes that Windows 2000 Terminal Server SYSVOL policy application can fail when connections exceed a maximum; monitor for official updates.

CVE-2002-1534

Macromedia Flash Player contains a vulnerability where a remote attacker can read arbitrary files by manipulating XML script inside a .swf hosted on a remote SMB share. The issue arises from how the SWF processes XML data from an SMB-based source, enabling file read access without local interacti...

CVE-2002-0444

Microsoft Windows 2000 running the Terminal Server 90-day trial version, and possibly other versions, does not apply group policies to incoming users when the number of connections to the SYSVOL share exceeds the maximum, e.g. with a maximum number of licenses, which can allow remote authenticate...

CVE-2002-1534: Undefined Security Weakness

Macromedia Flash Player allows remote attackers to read arbitrary files via XML script in a .swf file that is hosted on a remote SMB share...