Microsoft Windows XP/2003 - Samba Share Resource Exhaustion (Denial of Service)

!/bin/sh winblast v3 - DoS on WinXP, Win2003Srv 2003-12-04 Steve Ladjabi I've encountered a strange problem mounting a Windows server share. My setup: Debian Linux, smbmount 3.0.0beta2 and Windows 2003 Server. When the client creates and deletes a lot of files on the server, the server suddenly...

Multiple vulnerabilities in WWW Fileshare Pro <= 2.42

Luigi Auriemma Application: WWW File Share Pro http://www.wfshome.com Versions: = 2.42 Platforms: Windows Bugs: - arbitrary server's files overwriting - remote crash - directory authorization bypass Risk: critical Exploitation: remote Date: 14 Jan 2004 Author: Luigi Auriemma e-mail:...

CVE-2004-0060

CVE-2004-0060 affects WWW File Share Pro 2.42 and earlier. The vulnerability allows a remote attacker to trigger a denial-of-service (crash) via a large POST request sent over the network. The connected documents confirm the affected product and the impact (DoS via crafted POST size), but do not ...

CVE-2004-0061

WWW File Share Pro 2.42 and earlier allows remote attackers to bypass directory access restrictions via 1 a URL with a trailing . dot, or 2 a URI with a leading slash or backslash character...

CVE-2004-0059

Directory traversal vulnerability in upload capability of WWW File Share Pro 2.42 and earlier allows remote attackers to overwrite arbitrary files via .. dot dot sequences in the filename parameter of a Content-Disposition: header...

CVE-2004-0059

The CVE-2004-0059 entry describes a directory traversal vulnerability in the upload capability of WWW File Share Pro 2.42 and earlier. The issue allows remote attackers to overwrite arbitrary files by exploiting dot-dot sequences in the filename portion of a Content-Disposition header. Affected s...

CVE-2004-0061

CVE-2004-0061 affects WWW File Share Pro 2.42 and earlier . It allows remote attackers to bypass directory access restrictions by using a URL with a trailing dot or a URI beginning with a slash or backslash. The impact described is partial disclosure/integrity/availability with a network attack v...

CVE-2004-0060

WWW File Share Pro 2.42 and earlier allows remote attackers to cause a denial of service crash via a large POST request...

CVE-2004-0060: Undefined Security Weakness

WWW File Share Pro 2.42 and earlier allows remote attackers to cause a denial of service crash via a large POST request...

CVE-2004-0059: Undefined Security Weakness

Directory traversal vulnerability in upload capability of WWW File Share Pro 2.42 and earlier allows remote attackers to overwrite arbitrary files via .. dot dot sequences in the filename parameter of a Content-Disposition: header...

CVE-2004-0061: Undefined Security Weakness

WWW File Share Pro 2.42 and earlier allows remote attackers to bypass directory access restrictions via 1 a URL with a trailing . dot, or 2 a URI with a leading slash or backslash character...

wwwfilesharepro.txt

Luigi Auriemma Application: WWW File Share Pro http://www.wfshome.com Versions: From the vendor's website: "WWW File Share Pro is a small HTTP server that can help you share files with your friends. They can download files from your computer or upload files from theirs. Simply specify a directory...

LionMax Software WWW File Share Pro 2.4/2.6 - Remote Denial of Service

source: https://www.securityfocus.com/bid/9398/info It has been reported that WWW File Share Pro HTTP server may be prone to a remote denial of service condition. Successful exploitation of this vulnerability may allow a remote attacker to cause the vulnerable server to crash or hang, affectively...

LionMax Software WWW File Share Pro 2.42.6 - Remote Denial of Service

LionMax Software WWW File Share Pro 2.42.6 - Remote Denial of Service source: https://www.securityfocus.com/bid/9398/info It has been reported that WWW File Share Pro HTTP server may be prone to a remote denial of service condition. Successful exploitation of this vulnerability may allow a remote...

ScriptLogic $LOGS Share Remote Information Disclosure

The remote host has an accessible LOGS$ share. ScriptLogic creates this share to store the logs, but does not properly set the permissions on it. As a result, anyone can use it to read or modify, or possibly execute code. C Tenable Network Security, Inc. include"compat.inc"; if description...

ScriptLogic sets insecure permissions on "LOGS$" share

Overview Version 4.01 of ScriptLogic contains a vulnerability in the default permissions assigned to the network share used for logging. Description The ScriptLogic product from ScriptLogic, Inc. provides remote system administration capabilities for Microsoft Windows systems in a domain...

CVE-2001-0959: Undefined Security Weakness

Computer Associates ARCserve for NT 6.61 SP2a and ARCserve 2000 7.0 creates a hidden share named ARCSERVE$, which allows remote attackers to obtain sensitive information and overwrite critical files...

CVE-2002-1534

Macromedia Flash Player allows remote attackers to read arbitrary files via XML script in a .swf file that is hosted on a remote SMB share...

Security Bulletin MS02-045: Unchecked Buffer in Network Share Provider Can Lead to Denial of Service (Q326830)

---------------------------------------------------------------------- Title: Unchecked Buffer in Network Share Provider Can Lead to Denial of Service Q326830 Date: 22 August 2002 Software: Microsoft Windows NT 4.0 Workstation Microsoft Windows NT 4.0 Server Microsoft Windows NT 4.0 Server,...

CVE-2002-0479

Gravity Storm Service Pack Manager 2000 creates a hidden share SPM2000c$ mapped to the C drive, which may allow local users to bypass access restrictions on certain directories in the C drive, such as system32, by accessing them through the hidden share...