5 matches found
AZL-7352 CVE-2021-20254 affecting package samba 4.12.5-7
A flaw was found in samba. The Samba smbd file server must map Windows group identities SIDs into unix group ids gids. The code that performs this had a flaw that could allow it to read data beyond the end of the array in the case where a negative cache entry had been added to the mapping cache...
Samba: Stack-based buffer overflow by processing specially-crafted SID records
Stack-based buffer overflow in the 1 sidparse and 2 domsidparse functions in Samba before 3.5.5 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted Windows Security ID SID on a file share...
[SECURITY] [DSA-2109-1] New samba packages fix buffer overflow
------------------------------------------------------------------------ Debian Security Advisory DSA-2109-1 [email protected] http://www.debian.org/security/ Stefan Fritsch September 16, 2010 http://www.debian.org/security/faq -...
DEBIAN-CVE-2010-3069
Stack-based buffer overflow in the 1 sidparse and 2 domsidparse functions in Samba before 3.5.5 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted Windows Security ID SID on a file share...
Samba 3.x < 3.5.5 / 3.4.9 / 3.3.14 sid_parse Buffer Overflow
According to its banner, the version of Samba 3.x running on the remote host is earlier than 3.5.5. The 'sidparse' and related 'domsidparse' functions in such versions fail to correctly check their input lengths when reading a binary representation of a Windows SID Security ID. An attacker who is...