CVE-2009-2813

Samba 3.4 before 3.4.2, 3.3 before 3.3.8, 3.2 before 3.2.15, and 3.0.12 through 3.0.36, as used in the SMB subsystem in Apple Mac OS X 10.5.8 when Windows File Sharing is enabled, Fedora 11, and other operating systems, does not properly handle errors in resolving pathnames, which allows remote...

DEBIAN-CVE-2009-2813

Samba 3.4 before 3.4.2, 3.3 before 3.3.8, 3.2 before 3.2.15, and 3.0.12 through 3.0.36, as used in the SMB subsystem in Apple Mac OS X 10.5.8 when Windows File Sharing is enabled, Fedora 11, and other operating systems, does not properly handle errors in resolving pathnames, which allows remote...

CVE-2009-2813

CVE-2009-2813 affects Samba where SMB path resolution errors allow remote authenticated users to bypass sharing restrictions and read/create/modify files, specifically in versions: 3.0.12–3.0.36, 3.2.x before 3.2.15, 3.3.x before 3.3.8, and 3.4.x before 3.4.2, when used in the SMB subsystem of OS...

CVE-2009-2813

Samba 3.4 before 3.4.2, 3.3 before 3.3.8, 3.2 before 3.2.15, and 3.0.12 through 3.0.36, as used in the SMB subsystem in Apple Mac OS X 10.5.8 when Windows File Sharing is enabled, Fedora 11, and other operating systems, does not properly handle errors in resolving pathnames, which allows remote...

New Remote Flaw Found in SMB2 in Windows Vista and Windows 7

Researchers have found a new vulnerability in the SMB2 protocol in Windows Vista and Windows 7 that enables an attacker to remotely crash vulnerable machines. There is proof-of-concept exploit available for the vulnerability, as well. There is no patch available for the vulnerability, which affec...

Wowo mesh poly music share V 2.5 vulnerability-vulnerability warning-the black bar safety net

blog: www.link0day.cn Reprint please indicate the old saying. The official said this system: Wowo mesh poly music share V 2.5 Version 2.5 updates: 1. To add the song lyrics synchronization function; 2. To solve the player in other browsers is not compatible with the problem; 3. Modify the databas...

Windows Telnet credential reflection

Added: 08/12/2009 CVE: CVE-2009-1930 BID: 35993 OSVDB: 56904 Background Microsoft Windows operating systems come with a telnet service. This service prompts a user to provide a login name and password. Following successful authentication, the server displays a shell prompt, allowing the user to r...

Windows Telnet credential reflection

Added: 08/12/2009 CVE: CVE-2009-1930 BID: 35993 OSVDB: 56904 Background Microsoft Windows operating systems come with a telnet service. This service prompts a user to provide a login name and password. Following successful authentication, the server displays a shell prompt, allowing the user to r...

FotoFlexer Local File Inclusion

|ViRuSHiMa@YouR SyS|\ + ||||\ + ||||""|", + ||||""|"||| + " @''@""""""|@@@ +===========================================================================|| SupeSite : FotoFlexer API Local File Inclusion Vulnerability . || ! Download : http://fotoflexer.com/apidownload.php || ! Author : ViRuSHiMa...

kernel: cifs: fix potential buffer overruns when converting unicode strings sent by server

Multiple buffer overflows in the cifs subsystem in the Linux kernel before 2.6.29.4 allow remote CIFS servers to cause a denial of service memory corruption and possibly have unspecified other impact via 1 a malformed Unicode string, related to Unicode string area alignment in fs/cifs/sess.c; or ...

IBM Shows Off Way to Hide Confidential Data Online

From Network World Michael Cooney Researchers at IBM have developed software that uses optical character recognition and screen scraping to identify and cover up confidential data. According to IBM the driving idea behind the MAGEN Masking Gateway for Enterprises system is to prevent data leakage...

Soulseek 157 NS < 13e/156.* Remote Peer Search Code Execution PoC

Exploit for unknown platform in category dos / poc ================================================================= Soulseek 157 NS 13e/156. Remote Peer Search Code Execution PoC ================================================================= Soulseek 157 NS 13e & 156. Remote Peer Search Code...

Month Of Twitter Bugs - TwitSnaps XSS

Sunday, July 5, 2009 MoTB 05: Reflected XSS in TwitSnaps What is TwitSnaps "We tweet your photos, that's what we do! You want to share your photographs on Twitter? TwitSnaps is at your service." TwitSnaps about page Twitter affect TwitSnaps can be used to send tweets by uploading new photos, or...

Soulseek 157 NS SEH Overwrite

Soulseek 157 NS 13e & 156. Remote Peer Search Code Execution ============================================= - Release date: July 02, 2009 - Discovered by: Laurent Gaffié ; http://g-laurent.blogspot.com/ - Severity: critical ============================================= I. VULNERABILITY...

Ares

Ares Galaxy is an open source peer to peer file sharing application that uses its own decentralized supernode network. The latest versions also support the BitTorrent protocol. The use of Ares Galaxy may circumvent the organizational security policy. There are cases in which certain traffic,...

Report warns of 'web bugs' and privacy violations

Researchers at the University of California, Berkeley’s School of Information has released a report showing that the most popular Web sites in the United States all share data with their corporate affiliates and allow third parties to collect information directly by using tracking beacons known a...

Obama cybersecurity plan has a familiar ring

President Obama on Friday presented his long-awaited cybersecurity plan, which included the establishment of a new White House office headed by a cybersecurity “coordinator” who would oversee and advise Obama on this issue. He also proposed hiring a separate official dedicated to privacy and civi...

Soulseek Detection

Soulseek, a peer-to-peer P2P file-sharing application is installed on the remote system. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid38948; scriptversion"1.13"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/05/24"; scriptnameenglish:"Soulseek...

CVE-2009-1806

Unspecified vulnerability in IBM Hardware Management Console HMC 7 release 3.4.0 SP2, when Active Memory Sharing is used, has unknown impact and attack vectors, related to a shared memory partition and a shared memory pool with redundant paging Virtual I/O Server VIOS partitions. NOTE: some of...

Design/Logic Flaw

Unspecified vulnerability in IBM Hardware Management Console HMC 7 release 3.4.0 SP2, when Active Memory Sharing is used, has unknown impact and attack vectors, related to a shared memory partition and a shared memory pool with redundant paging Virtual I/O Server VIOS partitions. NOTE: some of...