104 matches found
Exposed clear text of domain machine
Description The machine trust account password is the secret shared between a domain controller and a specific member server. Access to the member server machine credentials allows an attacker to impersonate the server in the domain and gain access to additional information regarding domain users...
samba -- Exposure of machine account credentials in winbind log files
Samba Security Advisory: The machine trust account password is the secret shared between a domain controller and a specific member server. Access to the member server machine credentials allows an attacker to impersonate the server in the domain and gain access to additional information regarding...
Fedora Core 2 : samba-3.0.10-1.fc2 (2004-561)
Fri Dec 17 2004 Jay Fenlason 3.0.10-1.fc2 - New upstream release that closes CVE-2004-1154 bz142544 - Include the -64bit patch from Nalin. This closes bz142873 - Update the -logfiles patch to work with 3.0.10 - Create /var/run/winbindd and make it part of the -common rpm to close bz142242 - move...
Mandrake Linux Security Advisory : samba (MDKSA-2004:071)
A vulnerability was discovered in SWAT, the Samba Web Administration Tool. The routine used to decode the base64 data during HTTP basic authentication is subject to a buffer overrun caused by an invalid base64 character. This same code is also used to internally decode the sambaMungedDial attribu...