93 matches found
Samba < 3.0.35 / 3.2.13 / 3.3.6 Multiple Vulnerabilities
According to its version number, the version of Samba running on the remote host has a security bypass vulnerability. Access restrictions can be bypassed due to a read of uninitialized data in smbd. This could allow a user to modify an access control list ACL, even when they should be denied...
Formatstring vulnerability in smbclient
Description The smbclient utility in Samba 3.2.0 - 3.2.12 contains a formatstring vulnerability where commands dealing with file names treat user input as format strings to asprintf. An example is: smb: \ put aa%3Fbb putting file aa%3Fbb as \aa0,000000bb 0,0 kb/s average 0,0 kb/s As is obvious,...
Ubuntu 8.10 : samba vulnerability (USN-702-1)
Gunter Hockel discovered that Samba with registry shares enabled did not properly validate share names. An authenticated user could gain access to the root filesystem by using an older version of smbclient and specifying an empty string as a share name. This is only an issue if registry shares ar...
Ubuntu USN-702-1 (samba)
The remote host is missing an update to samba announced via advisory USN-702-1. OpenVAS Vulnerability Test $Id: ubuntu7021.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu7021.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-702-1 samba Authors: Thomas Reinke...
Samba 3.2.0 - 3.2.6 Unauthorized Access
According to its banner, the version of the Samba server on the remote host is between 3.2.0 and 3.2.6 inclusive. Such versions reportedly allow an authenticated, remote user to gain access to the root filesystem, subject to his or her privileges, by making a request for a share called '' empty...
USN-702-1: Samba vulnerability
Gunter Höckel discovered that Samba with registry shares enabled did not properly validate share names. An authenticated user could gain access to the root filesystem by using an older version of smbclient and specifying an empty string as a share name. This is only an issue if registry shares ar...
Potential access to "/" in setups with
Description When connecting to a share called "" empty string using an older version of smbclient before 3.0.28 for example with: 'smbclient //server/ -U user%pass' access to the root filesystem is granted with the privileges of the authenticated user. This only happens in setups with registry...
SmbClientParser 2.7 Perl Module - Remote Command Execution
source: https://www.securityfocus.com/bid/30290/info The SmbClientParser Perl module is prone to a remote command-execution vulnerability because it fails to sufficiently sanitize user-supplied data. Successfully exploiting this issue will allow an attacker to execute arbitrary commands with the...
SmbClientParser 2.7 Perl Module - Remote Command Execution
SmbClientParser 2.7 Perl Module - Remote Command Execution source: https://www.securityfocus.com/bid/30290/info The SmbClientParser Perl module is prone to a remote command-execution vulnerability because it fails to sufficiently sanitize user-supplied data. Successfully exploiting this issue wil...
sambaraw-overflow.txt
!/usr/bin/perl 06/01/2008 - ksOSe smbclient //localhost/w00t glibc detected smbclient: free: invalid next size fast: 0x0823c2d8 use warnings; use strict; use IO::Socket; my $sock = IO::Socket::INET-newLocalAddr = '0.0.0.0', LocalPort = '445', Listen = 1, Reuse = 1 || die$!; whilemy $csock =...
SMB Test with 'smbclient'
This VT is deprecated. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.90011";...
Mandrake Linux Security Advisory : links (MDKSA-2006:216)
The links web browser with smbclient installed allows remote attackers to execute arbitrary code via shell metacharacters in an smb:// URI, as demonstrated by using PUT and GET statements. Corporate 3.0 is not affected by this issue, as that version of links does not have smb:// URI support...
Links: Arbitrary Samba command execution
Background Links is a web browser running in both graphics and text modes. Description Teemu Salmela discovered that Links does not properly validate "smb://" URLs when it runs smbclient commands. Impact A remote attacker could entice a user to browse to a specially crafted "smb://" URL and execu...
Links ELinks SMBClient远程命令执行漏洞
Links ELinks是一款web浏览器。 Links ELinks存在一个缺陷，允许恶意web站点在目标机器上执行smbclient命令，此缺陷可能导致从目标系统上读取任意文件或者上传恶意文件到目标系统并执行。 具体问题代码如下： smbfunc in smb.c: ... 143 if share 144 if !dir || dirstrlendir - 1 == '/' || dirstrlendir - 1 == '\' 145 if dir 146 vn++ = "-D"; 147 vn++ = dir; 148 149 vn++ = "-c"; 150 vn++ =...
Links_ ELinks smbclient - Remote Command Execution
Links ELinks smbclient - Remote Command Execution source: https://www.securityfocus.com/bid/21082/info Links and ELinks are prone to a remote command-execution vulnerability because the applications fail to properly process website data containing 'smb' commands. An attacker can exploit this issu...
Links 1.00pre12 (smbclient) Remote Code Execution Exploit
No description provided by source. !-- Links smbclient command execution ----------------------------------------------------------------------------- There is a flaw in the Links web browser, that allows malicious web sites to execute smbclient commands on the victim's machine. This flaw makes i...
linkssmbclient.txt
Links smbclient command execution ----------------------------------------------------------------------------- There is a flaw in the Links web browser, that allows malicious web sites to execute smbclient commands on the victim's machine. This flaw makes it possible to read any file from the...
security flaw
Links web browser 1.00pre12 and Elinks 0.9.2 with smbclient installed allows remote attackers to execute arbitrary code via shell metacharacters in an smb:// URI, as demonstrated by using PUT and GET statements...
CVE-2006-5925
Links web browser 1.00pre12 and Elinks 0.9.2 with smbclient installed allows remote attackers to execute arbitrary code via shell metacharacters in an smb:// URI, as demonstrated by using PUT and GET statements...
CVE-2006-5925
Links web browser 1.00pre12 and Elinks 0.9.2 with smbclient installed allows remote attackers to execute arbitrary code via shell metacharacters in an smb:// URI, as demonstrated by using PUT and GET statements...