Lucene search
K

15 matches found

Tenable Nessus
Tenable Nessus
added 2025/08/27 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2021-31800

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple path traversal vulnerabilities exist in smbserver.py in Impacket through 0.9.22. An attacker that connects to a running smbserver instance can list and...

9.8CVSS7.8AI score0.39795EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2023/04/14 12:0 a.m.21 views

FreeBSD : py-impacket -- multiple path traversal vulnerabilities (b692a49c-9ae7-4958-af21-cbf8f5b819ea)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the b692a49c-9ae7-4958-af21-cbf8f5b819ea advisory. - Multiple path traversal vulnerabilities exist in smbserver.py in Impacket through 0.9.22. An attacker...

9.8CVSS9AI score0.39795EPSS
Exploits1References4
SUSE CVE
SUSE CVE
added 2023/02/15 3:41 a.m.1 views

SUSE CVE-2021-31800

Multiple path traversal vulnerabilities exist in smbserver.py in Impacket through 0.9.22. An attacker that connects to a running smbserver instance can list and write to arbitrary files via ../ directory traversal. This could potentially be abused to achieve arbitrary code execution by replacing...

9.8CVSS9.8AI score0.39795EPSS
Exploits1References3
Kitploit
Kitploit
added 2022/03/14 8:30 p.m.26 views

Lnkbomb - Malicious Shortcut Generator For Collecting NTLM Hashes From Insecure File Shares

Lnkbomb is used for uploading malicious shortcut files to insecure file shares. The vulnerability exists due to Windows looking for an icon file to associate with the shortcut file. This icon file can be directed to a penetration tester's machine running Responder or smbserver to gather NTLMv1 or...

7.5AI score
Exploits0References2
ArchLinux
ArchLinux
added 2021/07/21 12:0 a.m.114 views

[ASA-202107-56] impacket: directory traversal

Arch Linux Security Advisory ASA-202107-56 ========================================== Severity: Medium Date : 2021-07-21 CVE-ID : CVE-2021-31800 Package : impacket Type : directory traversal Remote : Yes Link : https://security.archlinux.org/AVG-1916 Summary ======= The package impacket before...

9.8CVSS2AI score0.39795EPSS
Exploits1References5
OSV
OSV
added 2021/06/18 6:43 p.m.35 views

GHSA-MJ63-64X7-57XF Path traversal in impacket

Multiple path traversal vulnerabilities exist in smbserver.py in Impacket before 0.9.23. An attacker that connects to a running smbserver instance can list and write to arbitrary files via ../ directory traversal. This could potentially be abused to achieve arbitrary code execution by replacing...

9.8CVSS9.7AI score0.39795EPSS
Exploits1References15
Github Security Blog
Github Security Blog
added 2021/06/18 6:43 p.m.75 views

Path traversal in impacket

Multiple path traversal vulnerabilities exist in smbserver.py in Impacket before 0.9.23. An attacker that connects to a running smbserver instance can list and write to arbitrary files via ../ directory traversal. This could potentially be abused to achieve arbitrary code execution by replacing...

9.8CVSS6.3AI score0.39795EPSS
Exploits1References14Affected Software1
Veracode
Veracode
added 2021/05/08 12:30 p.m.23 views

Directory Traversal

impacket is vulnerable to directory traversal. An attacker is able to list and write to arbitrary files using ../ characters when connected to a running smbserver instance...

9.8CVSS5.1AI score0.39795EPSS
Exploits1References12Affected Software2
Prion
Prion
added 2021/05/05 11:15 a.m.10 views

Path traversal

Multiple path traversal vulnerabilities exist in smbserver.py in Impacket through 0.9.22. An attacker that connects to a running smbserver instance can list and write to arbitrary files via ../ directory traversal. This could potentially be abused to achieve arbitrary code execution by replacing...

7.5CVSS9.7AI score0.39795EPSS
Exploits1References9Affected Software2
UbuntuCve
UbuntuCve
added 2021/05/05 11:15 a.m.23 views

CVE-2021-31800

Multiple path traversal vulnerabilities exist in smbserver.py in Impacket through 0.9.22. An attacker that connects to a running smbserver instance can list and write to arbitrary files via ../ directory traversal. This could potentially be abused to achieve arbitrary code execution by replacing...

9.8CVSS7.7AI score0.39795EPSS
Exploits1References7
OSV
OSV
added 2021/05/05 11:15 a.m.0 views

UBUNTU-CVE-2021-31800

Multiple path traversal vulnerabilities exist in smbserver.py in Impacket through 0.9.22. An attacker that connects to a running smbserver instance can list and write to arbitrary files via ../ directory traversal. This could potentially be abused to achieve arbitrary code execution by replacing...

9.8CVSS6.4AI score0.39795EPSS
Exploits1References8
PyPA
PyPA
added 2021/05/05 11:15 a.m.3 views

PYSEC-2021-17

Multiple path traversal vulnerabilities exist in smbserver.py in Impacket through 0.9.22. An attacker that connects to a running smbserver instance can list and write to arbitrary files via ../ directory traversal. This could potentially be abused to achieve arbitrary code execution by replacing...

9.8CVSS8AI score0.39795EPSS
Exploits1References10Affected Software1
CNNVD
CNNVD
added 2021/05/05 12:0 a.m.1 views

impacket 路径遍历漏洞

impacket is a software application. A collection of Python classes for handling network protocols. A security vulnerability exists in Impacket versions prior to 0.9.22, which stems from a multiple path traversal vulnerability in smbserver.py. An attacker could exploit this vulnerability to... Lis...

9.8CVSS8.8AI score0.39795EPSS
Exploits1References11
Positive Technologies
Positive Technologies
added 2021/04/25 12:0 a.m.2 views

PT-2021-4103 · Impacket · Impacket

Name of the Vulnerable Software and Affected Versions: Impacket versions 0.9.22 and earlier Description: The issue is related to multiple path traversal vulnerabilities in the smbserver.py component of Impacket. An attacker connecting to a running smbserver instance can exploit these...

9.8CVSS8AI score0.39795EPSS
Exploits1References35
Exploit DB
Exploit DB
added 2010/09/21 12:0 a.m.56 views

Microsoft Windows - SMB Relay Code Execution (MS08-068) (Metasploit)

$Id: smbrelay.rb 10404 2010-09-21 00:13:30Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

9.3CVSS7AI score0.7553EPSS
Exploits9
Rows per page
Query Builder