SuSE Update for samba SUSE-SA:2007:065

Check for the Version of samba OpenVAS Vulnerability Test $Id: gbsuse2007065.nasl 8050 2017-12-08 09:34:29Z santu $ SuSE Update for samba SUSE-SA:2007:065 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; y...

Microsoft Windows SMB NT Trans2请求远程拒绝服务及代码执行漏洞（MS09-001）

BUGTRAQ ID: 33122 CVECAN ID: CVE-2008-4835 Windows是微软发布的非常流行的操作系统。 Microsoft服务器消息块（SMB）协议软件处理特制SMB数据包的方式存在安全漏洞，未经认证的远程攻击者可以在NT Trans2请求中指定畸形的值导致内核忙碌，必须重启系统才能恢复操作。利用此漏洞的大多数尝试会导致系统拒绝服务，但是远程执行代码在理论上是可行的。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Vista SP1 Microsoft Windows...

Vulnerabilities in SMB Could Allow Remote Code Execution (958687)

This host is missing a critical security update according to Microsoft Bulletin MS09-001. OpenVAS Vulnerability Test $Id: secpodms09-001.nasl 5363 2017-02-20 13:07:22Z cfi $ Vulnerabilities in SMB Could Allow Remote Code Execution 958687 Authors: Chandan S Copyright c 2009 SecPod,...

SMB TRANS Request Buffer Overflow Remote Code Execution (MS09-001; CVE-2008-4834)

The SMB Protocol is a network file sharing protocol that is implemented in Microsoft Windows. A remote code execution vulnerability has been reported in the way that Microsoft Server Message Block SMB Protocol handles specially crafted SMB packets. The vulnerability is due to insufficient...

Microsoft Security Bulletin MS09-001 - Critical Vulnerabilities in SMB Could Allow Remote Code Execution (958687)

Microsoft Security Bulletin MS09-001 - Critical Vulnerabilities in SMB Could Allow Remote Code Execution 958687 Published: January 13, 2009 Version: 1.0 General Information Executive Summary This security update resolves several privately reported vulnerabilities in Microsoft Server Message Block...

SMB TRANS2 Request Validation Remote Code Execution (MS09-001; CVE-2008-4835)

The SMB Protocol is a network file sharing protocol that is implemented in Microsoft Windows. A remote code execution vulnerability has been reported in the way that Microsoft Server Message Block SMB Protocol handles specially crafted SMB packets. The vulnerability is due to insufficient...

Microsoft Windows SMB NT Trans2 Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability that occurs in the SMB Server Message Block protocol implementation. An attacker can exploit this issue to execute arbitrary code with SYSTEM-level privileges. Successful exploits will facilitate in the complete...

Samba注册表共享名非授权访问漏洞

BUGTRAQ ID: 33118 CVECAN ID: CVE-2009-0022 Samba是一套实现SMB（Server Messages Block）协议、跨平台进行文件共享和打印共享服务的程序。 启用了注册表共享的Samba没有正确地验证共享名，通过认证的攻击者可以通过使用较老版本的smbclient并指定空字符串为共享名（如smbclient //server/ -U user%pass）来访问root文件系统。 Samba 3.2.0 - 3.2.6 临时解决方法： 通过registry shares = no禁用注册表共享。 厂商补丁： Samba -----...

[SECURITY] Fedora 10 Update: samba-3.2.5-0.23.fc10

Samba is the suite of programs by which a lot of PC-related machines share files, printers, and other information such as lists of available files and printers. The Windows NT, OS/2, and Linux operating systems support this natively, and add-on packages can enable the same thing for DOS, Windows,...

Samba smbd远程信息泄露漏洞

BUGTRAQ ID: 32494 CVECAN ID: CVE-2008-4314 Samba是一套实现SMB（Server Messages Block）协议、跨平台进行文件共享和打印共享服务的程序。 Samba在处理trans、trans2和nttrans请求时存在边界条件错误。这些请求用于在客户端和服务器之间传输任意数量的内存，包含有两个偏移：偏移A指向客户端所发送的PDU，偏移B将传输的内存引导到服务端上的缓冲区。由于在偏移A中的一个剪切错误，导致远程攻击者可以通过发送特制的请求泄露受限制的smbd进程内存。 Samba 3.0.29 - 3.2.4 Samba -----...

Microsoft Windows SMB凭据反射漏洞（MS08-068）

BUGTRAQ ID: 7385 CVECAN ID: CVE-2008-4037 Windows是微软发布的非常流行的操作系统。 当用户连接到攻击者的SMB服务器时，Microsoft服务器消息块（SMB）协议处理NTLM凭据的方式存在远程代码执行漏洞，允许攻击者重放用户凭据，并在登录用户的下文中执行代码。如果用户使用管理用户权限登录，成功利用此漏洞的攻击者便可完全控制受影响的系统。攻击者可随后安装程序；查看、更改或删除数据，或者创建拥有完全用户权限的新帐户。那些帐户被配置为拥有较少系统用户权限的用户比具有管理用户权限的用户受到的影响要小。 Microsoft Windows XP S...

SMB Could Allow Remote Code Execution Vulnerability (957097)

This host is missing a critical security update according to Microsoft Bulletin MS08-068. OpenVAS Vulnerability Test $Id: secpodms08-068900057.nasl 5934 2017-04-11 12:28:28Z antu123 $ Description: SMB Could Allow Remote Code Execution Vulnerability 957097 Authors: Chandan S Copyright: Copyright C...

Microsoft Security Bulletin MS08-068 – Important Vulnerability in SMB Could Allow Remote Code Execution (957097)

Microsoft Security Bulletin MS08-068 – Important Vulnerability in SMB Could Allow Remote Code Execution 957097 Published: November 11, 2008 Version: 1.0 General Information Executive Summary This security update resolves a publicly disclosed vulnerability in Microsoft Server Message Block SMB...

Microsoft Windows SMB Credential Reflection Remote Code Execution (MS08-068; CVE-2008-4037)

SMB reflection attacks is a type of "Man-in-the-Middle" MITM attack in which an attacker reflects the clients SMB challenge back to the client and by that bypass security, allowing the attacker to execute code in the context of the logged-on user. A remote code execution vulnerability has been...

smb-os-discovery NSE Script

Attempts to determine the operating system, computer name, domain, workgroup, and current time over the SMB protocol ports 445 or 139. This is done by starting a session with the anonymous account or with a proper user account, if one is given; it likely doesn't make a difference; in response to ...

Microsoft Windows SMB buffer overflow

Buffer overflow on SMB protocol parsing...

Microsoft Windows Malformed SMB Search Request Buffer Overflow (MS08-063; CVE-2008-4038)

The Server Message Block SMB Protocol is a network file sharing protocol that is implemented in Microsoft Windows. A remote code execution vulnerability has been reported in the way that Microsoft Server Message Block SMB Protocol handles specially crafted file names. The vulnerability is due to...

FreeBSD Ports: kdebase, kdelibs

The remote host is missing an update to the system as announced in the referenced advisory. VID 4593cb09-4c81-11d9-983e-000c6e8f12ef OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Samba lsa_io_trans_names buffer overflow

Added: 12/24/2007 CVE: CVE-2007-2446 BID: 24195 OSVDB: 34699 Background Samba is a software package which implements the SMB protocol on a variety of platforms, providing compatibility with Windows systems. Problem A vulnerability in the LSA RPC interface allows a remote attacker to execute...

Samba NMBD登录请求远程溢出漏洞

BUGTRAQ ID: 26454 CVECAN ID: CVE-2007-4572 Samba是一套实现SMB（Server Messages Block）协议、跨平台进行文件共享和打印共享服务的程序。 Samba的nmbd在处理GETDC登录服务器请求时存在缓冲器溢出漏洞，可能导致非预期的服务器行为。 如果远程攻击者发送了畸形的GETDC请求的话就可以触发这个漏洞，但无法利用这个溢出执行任意指令，在大多数情况下也不会导致Samba服务器崩溃。仅在将Samba服务器配置为主或备份域控制器时才会出现这个漏洞。 Samba 3.0.0 - 3.0.26a 临时解决方法：...