RHEL 2.1 : samba (RHSA-2004:498)

Updated samba packages that fix an input validation vulnerability are now available. Samba provides file and printer sharing services to SMB/CIFS clients. Karol Wiesek discovered an input validation issue in Samba prior to 3.0.6. An authenticated user could send a carefully crafted request to the...

konqueror -- Password Disclosure for SMB Shares

When browsing SMB shares with Konqueror, shares with authentication show up with hidden password in the browser bar. It is possible to store the URL as a shortcut on the desktop where the password is then available in plain text...

Fedora Core 2 : cups-1.1.20-11.4 (2004-331)

This update fixes an information leakage problem when printing to SMB shares requiring authentication. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the name CVE-2004-0923 to this issue. Note that Tenable Network Security has extracted the preceding description block...

Debian DSA-374-1 : libpam-smb - buffer overflow

libpam-smb is a PAM authentication module which makes it possible to authenticate users against a password database managed by Samba or a Microsoft Windows server. If a long password is supplied, this can cause a buffer overflow which could be exploited to execute arbitrary code with the privileg...

CVE-2004-0829

The provided connected documents confirm CVE-2004-0829 is a DoS vulnerability in Samba prior to 2.2.11, where sending a FindNextPrintChangeNotify without a preceding FindFirstPrintChangeNotify can crash the daemon (as demonstrated by the Windows XP SP2 SMB client). Affected product: Samba (before...

Ethereal fails to properly handle malformed SMB packets

Overview Ethereal contains a vulnerability in the way it processes Server Message Block SMB packets. Description The Server Message Block SMB protocol is used for sharing files, printers, and other resources between computers. SMB is used in Microsoft Windows to provide file and print services...

CVE-2002-1534

Macromedia Flash Player contains a vulnerability where a remote attacker can read arbitrary files by manipulating XML script inside a .swf hosted on a remote SMB share. The issue arises from how the SWF processes XML data from an SMB-based source, enabling file read access without local interacti...

CVE-2004-0193

CVE-2004-0193 describes a heap-based buffer overflow in the ISS Protocol Analysis Module (PAM) used by RealSecure/BlackICE products. An SMB authentication request with a long username allows a remote attacker to execute arbitrary code. Affected: RealSecure Network 7.0 and Server Sensor 7.0, Prove...

CVE-2004-0193

Heap-based buffer overflow in the ISS Protocol Analysis Module PAM, as used in certain versions of RealSecure Network 7.0 and Server Sensor 7.0, Proventia A, G, and M Series, RealSecure Desktop 7.0 and 3.6, RealSecure Guard 3.6, RealSecure Sentry 3.6, BlackICE PC Protection 3.6, and BlackICE Serv...

CVE-2002-1256

The SMB signing capability in the Server Message Block SMB protocol in Microsoft Windows 2000 and Windows XP allows attackers to disable the digital signing settings in an SMB session to force the data to be sent unsigned, then inject data into the session without detection, e.g. by modifying gro...

CVE-2002-1256

CVE-2002-1256 describes a flaw in SMB signing in Windows 2000/XP that lets an attacker disable SMB signing in a session and inject unsigned data, potentially modifying group policy information sent from a domain controller. Affected products are Microsoft Windows 2000 and Windows XP; the root cau...

GLSA-200407-08 : Ethereal: Multiple security problems

The remote host is affected by the vulnerability described in GLSA-200407-08 Ethereal: Multiple security problems There are multiple vulnerabilities in versions of Ethereal earlier than 0.10.5, including: In some cases the iSNS dissector could cause Ethereal to abort. If there was no policy name...

Ethereal 0.x - Multiple iSNS SMB SNMP Protocol Dissector Vulnerabilities

Ethereal 0.x - Multiple iSNS SMB SNMP Protocol Dissector Vulnerabilities // source: https://www.securityfocus.com/bid/10672/info Ethereal 0.10.5 has been released to address multiple vulnerabilities, including an iSNS protocol dissector vulnerability, a SMB protocol dissector vulnerability, and a...

Ethereal 0.x - Multiple iSNS / SMB / SNMP Protocol Dissector Vulnerabilities

// source: https://www.securityfocus.com/bid/10672/info Ethereal 0.10.5 has been released to address multiple vulnerabilities, including an iSNS protocol dissector vulnerability, a SMB protocol dissector vulnerability, and a SNMP protocol dissector vulnerability. These issues are due to a failure...

Fedora Core 2 : ethereal-0.10.5-0.2.1 (2004-220)

Issues have been discovered in the following protocol dissectors : - The iSNS dissector could make Ethereal abort in some cases. 0.10.3 - 0.10.4 CVE-2004-0633 - SMB SID snooping could crash if there was no policy name for a handle. 0.9.15 - 0.10.4 CVE-2004-0634 - The SNMP dissector could crash du...

Fedora Core 1 : ethereal-0.10.0a-0.1 (2003-040)

Serious issues have been discovered in the following protocol dissectors : - Selecting 'Match-Selected' or 'Prepare-Selected' for a malformed SMB packet could cause a segmentation fault. - It is possible for the Q.931 dissector to dereference a NULL pointer when reading a malformed packet. Impact...

Ethereal: Multiple security problems

Background Ethereal is a feature rich network protocol analyzer. Description There are multiple vulnerabilities in versions of Ethereal earlier than 0.10.5, including: In some cases the iSNS dissector could cause Ethereal to abort. If there was no policy name for a handle for SMB SID snooping it...

CVE-2004-0634

The SMB SID snooping capability in Ethereal 0.9.15 to 0.10.4 allows remote attackers to cause a denial of service process crash via a handle without a policy name, which causes a null dereference...

CVE-2004-0634

The CVE-2004-0634 issue affects Ethereal (the SMB dissector) with the SMB SID snooping capability, in versions 0.9.15 through 0.10.4. The root cause is a null dereference triggered by a handle without a policy name in SMB processing, allowing a remote attacker to cause a denial of service (proces...

Microsoft Windows XP - Self-Executing Folder

Microsoft Windows XP - Self-Executing Folder source: https://www.securityfocus.com/bid/10363/info A vulnerability has been reported in Microsoft Windows XP that may cause malicious code to run in the context of the currently logged-in user. The flaw exists in Windows Explorer and may allow...