9036 matches found
CVE-2010-2351
CVE-2010-2351 is a stack-based buffer overflow in the CIFS.NLM driver of Netware SMB 1.0 (Novell Netware 6.5 SP8 and earlier). The vulnerability allows remote attackers to execute arbitrary code via a Sessions Setup AndX packet with a long AccountName. Public references confirm the affected compo...
CVE-2010-2347
The Telnet interface in the SAP J2EE Engine Core SAP-JEECOR 6.40 through 7.02, and Server Core SERVERCORE 7.10 through 7.30 allows remote authenticated users to bypass a security check and conduct SMB relay attacks via unspecified vectors...
Samba buffer overflow
Buffer overflow and DoS conditions on SMB request parsing...
libsmbclient, libtalloc, libtdb, samba, samba3x, tdb security update
CentOS Errata and Security Advisory CESA-2010:0488 Updated samba and samba3x packages that fix one security issue are now available for Red Hat Enterprise Linux 3, 4, and 5, and Red Hat Enterprise Linux 4.7, 5.3, and 5.4 Extended Update Support. The Red Hat Security Response Team has rated this...
Netware SMB 1.0 Remote Stack Overflow
=============================================================================== Stratsec Security Advisory: SS-2010-006 =============================================================================== Title: Netware SMB Remote Stack Overflow Version: 1.0 Issue type: Stack Overflow Affected vendor:...
Symantec AppStream / Workspace Streaming Remote Code Execution (SYM10-008)
The version of Symantec AppStream or Symantec Workspace Streaming running on the remote host has a remote code execution vulnerability. The client does not properly authenticate to the server before downloading available files. A remote attacker could exploit this by setting up a rogue Workspace...
CVE-2010-1381
The default configuration of SMB File Server in Apple Mac OS X 10.5.8, and 10.6 before 10.6.4, enables support for wide links, which allows remote authenticated users to access arbitrary files via vectors involving symbolic links. NOTE: this might overlap CVE-2010-0926...
Format string
Multiple format string vulnerabilities in Network Authorization in Apple Mac OS X 10.6 before 10.6.4 allow remote attackers to execute arbitrary code or cause a denial of service application crash via format string specifiers in a 1 afp, 2 cifs, or 3 smb URL...
Default configuration
The default configuration of SMB File Server in Apple Mac OS X 10.5.8, and 10.6 before 10.6.4, enables support for wide links, which allows remote authenticated users to access arbitrary files via vectors involving symbolic links. NOTE: this might overlap CVE-2010-0926...
CVE-2010-1376
CVE-2010-1376 involves multiple format string vulnerabilities in Apple Mac OS X 10.6’s Network Authorization. According to the connected sources, the flaw resides in how format string specifiers are processed for AFP/CIFS/SMB URLs, potentially allowing a remote attacker to execute arbitrary code ...
CVE-2010-1381
The default configuration of SMB File Server in Apple Mac OS X 10.5.8, and 10.6 before 10.6.4, enables support for wide links, which allows remote authenticated users to access arbitrary files via vectors involving symbolic links. NOTE: this might overlap CVE-2010-0926...
CVE-2010-1376
Multiple format string vulnerabilities in Network Authorization in Apple Mac OS X 10.6 before 10.6.4 allow remote attackers to execute arbitrary code or cause a denial of service application crash via format string specifiers in a 1 afp, 2 cifs, or 3 smb URL...
CVE-2010-1381
CVE-2010-0926 concerns Samba smbd configurations that enable wide links, allowing remote authenticated users to traverse directories and access arbitrary files via symlinks. Affected are Samba versions prior to 3.3.11, 3.4.x prior to 3.4.6, and 3.5.x prior to 3.5.0rc3 when a writable share exists...
SMB Session Pipe Auditor
Determine what named pipes are accessible over SMB This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'SMB Session Pipe Auditor', 'Description' = 'Determine what named pipes are accessible over SMB...
Netware SMB Remote Stack Overflow PoC
Exploit for novell platform in category dos / poc ===================================== Netware SMB Remote Stack Overflow PoC ===================================== Title: Netware SMB Remote Stack Overflow Version: 1.0 Issue type: Stack Overflow Affected vendor: Novell Release date: 17/06/2010...
Netware - SMB Remote Stack Overflow (PoC)
Netware - SMB Remote Stack Overflow PoC =============================================================================== Stratsec Security Advisory: SS-2010-006 =============================================================================== Title: Netware SMB Remote Stack Overflow Version: 1.0 Iss...
Netware - SMB Remote Stack Overflow (PoC)
=============================================================================== Stratsec Security Advisory: SS-2010-006 =============================================================================== Title: Netware SMB Remote Stack Overflow Version: 1.0 Issue type: Stack Overflow Affected vendor:...
Critical: Red Hat Security Advisory: samba and samba3x security update
Updated samba and samba3x packages that fix one security issue are now available for Red Hat Enterprise Linux 3, 4, and 5, and Red Hat Enterprise Linux 4.7, 5.3, and 5.4 Extended Update Support. The Red Hat Security Response Team has rated this update as having critical security impact. A Common...
Microsoft SQL Server Backup Restoring Memory Corruption (MS08-040; CVE-2008-0107)
Microsoft SQL Server is a relational database management system RDBMS. Microsoft SQL Server uses Transact-SQL T-SQL, a proprietary extension to Structured Query Language SQL, for querying and modifying data and managing databases. SQL Server can be remotely access via the Tabular Data Stream TDS...