HP-UX Security Patch : PHKL_27510

vfs cumulative patch %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid26374; scriptversion"1.8"; scriptsetattributeattribute:"pluginmodificationdate", value:"2021/01/11";...

HP-UX Security Patch : PHKL_27770

vfs cumulative; resolve SG/vsar incompat. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid26378; scriptversion"1.8"; scriptsetattributeattribute:"pluginmodificationdate",...

FreeBSD : samba -- format string bug in afsacl.so VFS plugin (57ae52f7-b9cc-11db-bf0f-0013720b182d)

The Samba Team reports : NOTE: This security advisory only impacts Samba servers that share AFS file systems to CIFS clients and which have been explicitly instructed in smb.conf to load the afsacl.so VFS module. The source defect results in the name of a file stored on disk being used as the...

GLSA-200702-01 : Samba: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200702-01 Samba: Multiple vulnerabilities A format string vulnerability exists in the VFS module when handling AFS file systems and an infinite loop has been discovered when handling file rename operations. Impact : A user with...

Samba AFS ACL mapping VFS plug-in format string vulnerability

Overview Samba AFS ACL mapping VFS plug-in contains a format string vulnerability. This vulnerability may allow a remote attacker to execute arbitrary code on a vulnerable system. Description Samba AFS ACL mapping VFS plug-in fails to properly sanitize user-controlled file names that are used in ...

CVE-2007-0454

Format string vulnerability in the afsacl.so VFS module in Samba 3.0.6 through 3.0.23d allows context-dependent attackers to execute arbitrary code via format string specifiers in a filename on an AFS file system, which is not properly handled during Windows ACL mapping...

Format string bug in afsacl.so VFS plugin.

Description NOTE: This security advisory only impacts Samba servers that share AFS file systems to CIFS clients and which have been explicitly instructed in smb.conf to load the afsacl.so VFS module. The source defect results in the name of a file stored on disk being used as the format string in...

samba -- format string bug in afsacl.so VFS plugin

The Samba Team reports: NOTE: This security advisory only impacts Samba servers that share AFS file systems to CIFS clients and which have been explicitly instructed in smb.conf to load the afsacl.so VFS module. The source defect results in the name of a file stored on disk being used as the form...

Samba file server multiple security vulnerabilities

Solaris nsswinbind.so.1 gethostbyname and nsswinbind.so.1 functions buffer overflow. Remote DoS in smbd with infinite loop. Format string vulnerability in VFS afsacl.so plugin...

[SAMBA-SECURITY] CVE-2007-0454: Format string bug in afsacl.so VFS plugin

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ========================================================== == == Subject: Format string bug in afsacl.so VFS plugin. == CVE ID: CVE-2007-0454 == == Versions: The AFS ACL mapping VFS plugin distributed == in Samba 3.0.6 - 3.0.23d inclusive == == Summar...

CVE-2005-3807

Memory leak in the VFS file lease handling in locks.c in Linux kernels 2.6.10 to 2.6.15 allows local users to cause a denial of service memory exhaustion via certain Samba activities that cause an fasync entry to be re-allocated by the fcntlsetlease function after the fasync queue has already bee...

CVE-2005-3807

Memory leak in the VFS file lease handling in locks.c in Linux kernels 2.6.10 to 2.6.15 allows local users to cause a denial of service memory exhaustion via certain Samba activities that cause an fasync entry to be re-allocated by the fcntlsetlease function after the fasync queue has already bee...

CVE-2005-3807

Memory leak in the VFS file lease handling in locks.c in Linux kernels 2.6.10 to 2.6.15 allows local users to cause a denial of service memory exhaustion via certain Samba activities that cause an fasync entry to be re-allocated by the fcntlsetlease function after the fasync queue has already bee...

CVE-2005-3807

CVE-2005-3807 describes a memory leak in the VFS lease handling (locks.c) in Linux kernels 2.6.10–2.6.15 that can lead to local denial of service (memory exhaustion) when Samba activities trigger re-allocation of an fasync entry after clean-up. Multiple connected advisories (Ubuntu USN-231-1 and ...

CVE-2004-0494

Removed by vendor...

CVE-2004-0494

CVE-2004-0494 affects GNOME VFS extfs backend scripts in GNOME VFS prior to 1.0.1, allowing remote attackers to perform unauthorized actions via a gnome-vfs URI. Connected documents confirm affected packages include gnome-vfs, gnome-vfs2 and gnome-vfs2-doc, with vendor advisories: RHSA-2004:373 (...

RHEL 2.1 / 3 : gnome-vfs (RHSA-2004:373)

Updated GNOME VFS packages that remove potential extfs-related vulnerabilities are now available. GNOME VFS is the GNOME virtual file system. It provides a modular architecture and ships with several modules that implement support for file systems, HTTP, FTP, and others. The extfs backends make i...

Low: Red Hat Security Advisory: gnome-vfs security update

Updated GNOME VFS packages that remove potential extfs-related vulnerabilities are now available. GNOME VFS is the GNOME virtual file system. It provides a modular architecture and ships with several modules that implement support for file systems, HTTP, FTP, and others. The extfs backends make i...

DEBIAN-CVE-2003-1023

Stack-based buffer overflow in vfssresolvesymlink of vfs/direntry.c for Midnight Commander mc 4.6.0 and earlier, and possibly later versions, allows remote attackers to execute arbitrary code during symlink conversion...

CVE-2003-0599

CVE-2003-0599 concerns phpGroupWare (0.9.16preRC and all versions before 0.9.14.004). The vulnerability lies in the Virtual File System (VFS) capability, with the root cause described as the VFS path being under the web document root, and implications are stated as unknown. The advisory lists a h...