jetlib.sec » Tags » server-message-block

Feeds

133445 items (0 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

14 items tagged "server message block"

Related tags: samba suite [+], rpc [+], red [+], server [+], unix [+], security [+], samba server [+], samba clients [+], transfer protocol ftp [+], read [+], protocol [+], mac os [+], file transfer protocol [+], file [+], don [+], apple filing [+], afp [+], Pentesting [+], samba [+], open source implementation [+]

• May 18, 2012
• 5:00

  From LOW to PWNED [9] Apple Filing Protocol (AFP)

   » ‎ Carnal0wnage
  Post [9] Apple Filing Protocol (AFP)
  
  

  The Apple Filing Protocol (AFP) is a network protocol that offers file services for Mac OS X and original Mac OS. In Mac OS X, AFP is one of several file services supported including Server Message Block (SMB), Network File System (NFS), File Transfer Protocol (FTP), and WebDAV.

  http://en.wikipedia.org/wiki/Apple_Filing_Protocol
  
  Lives on TCP port 548
  
  LOW?
  
  
  
  
  What can I do with it?
  
  

  • Read access to files/folders (always fun)
  • Write access (sometimes)

  Discovery?

  • Vuln scanners (duh)
  • Nmap scripts
  • afp-showmount
  • afp-serverinfo
  • afp-ls
  • afp-brute
  • afp-path-vuln (directory traversal exploit)

  Nmap examples
  
  Connecting to AFP servers
  Super easy if you have a MacLinux you can use Afpfs-ng
  
  
  
  
  Window? dunno. Don't think so...
  
  
  

  Tags:  protocol file afp mac-os read don apple-filing transfer-protocol-ftp server-message-block file-transfer-protocol Pentesting  

• May 01, 2012
• 14:33

  Red Hat Security Advisory 2012-0533-01

   » ‎ Packet Storm Security Advisories
  Red Hat Security Advisory 2012-0533-01 - Samba is an open-source implementation of the Server Message Block or Common Internet File System protocol, which allows PC-compatible machines to share files, printers, and other information. A flaw was found in the way Samba handled certain Local Security Authority Remote Procedure Calls. An authenticated user could use this flaw to issue an RPC call that would modify the privileges database on the Samba server, allowing them to steal the ownership of files and directories that are being shared by the Samba server, and create, delete, and modify user accounts, as well as other Samba server administration tasks.

  Tags:  server samba security server-message-block open-source-implementation samba-server  

• 14:33

  Red Hat Security Advisory 2012-0533-01

   » ‎ Packet Storm Security Recent Files
  Red Hat Security Advisory 2012-0533-01 - Samba is an open-source implementation of the Server Message Block or Common Internet File System protocol, which allows PC-compatible machines to share files, printers, and other information. A flaw was found in the way Samba handled certain Local Security Authority Remote Procedure Calls. An authenticated user could use this flaw to issue an RPC call that would modify the privileges database on the Samba server, allowing them to steal the ownership of files and directories that are being shared by the Samba server, and create, delete, and modify user accounts, as well as other Samba server administration tasks.

  Tags:  server samba security server-message-block open-source-implementation samba-server  

• 14:33

  Red Hat Security Advisory 2012-0533-01

   » ‎ Packet Storm Security Misc. Files
  Red Hat Security Advisory 2012-0533-01 - Samba is an open-source implementation of the Server Message Block or Common Internet File System protocol, which allows PC-compatible machines to share files, printers, and other information. A flaw was found in the way Samba handled certain Local Security Authority Remote Procedure Calls. An authenticated user could use this flaw to issue an RPC call that would modify the privileges database on the Samba server, allowing them to steal the ownership of files and directories that are being shared by the Samba server, and create, delete, and modify user accounts, as well as other Samba server administration tasks.

  Tags:  server samba security server-message-block open-source-implementation samba-server  

• April 13, 2012
• 12:35

  Red Hat Security Advisory 2012-0478-01

   » ‎ Packet Storm Security Advisories
  Red Hat Security Advisory 2012-0478-01 - Samba is an open-source implementation of the Server Message Block or Common Internet File System protocol, which allows PC-compatible machines to share files, printers, and other information. A flaw in the Samba suite's Perl-based DCE/RPC IDL compiler, used to generate code to handle RPC calls, resulted in multiple buffer overflows in Samba. A remote, unauthenticated attacker could send a specially-crafted RPC request that would cause the Samba daemon to crash or, possibly, execute arbitrary code with the privileges of the root user.

  Tags:  samba red rpc server-message-block open-source-implementation samba-suite  

• 12:35

  Red Hat Security Advisory 2012-0478-01

   » ‎ Packet Storm Security Recent Files
  Red Hat Security Advisory 2012-0478-01 - Samba is an open-source implementation of the Server Message Block or Common Internet File System protocol, which allows PC-compatible machines to share files, printers, and other information. A flaw in the Samba suite's Perl-based DCE/RPC IDL compiler, used to generate code to handle RPC calls, resulted in multiple buffer overflows in Samba. A remote, unauthenticated attacker could send a specially-crafted RPC request that would cause the Samba daemon to crash or, possibly, execute arbitrary code with the privileges of the root user.

  Tags:  samba red rpc server-message-block open-source-implementation samba-suite  

• 12:35

  Red Hat Security Advisory 2012-0478-01

   » ‎ Packet Storm Security Misc. Files
  Red Hat Security Advisory 2012-0478-01 - Samba is an open-source implementation of the Server Message Block or Common Internet File System protocol, which allows PC-compatible machines to share files, printers, and other information. A flaw in the Samba suite's Perl-based DCE/RPC IDL compiler, used to generate code to handle RPC calls, resulted in multiple buffer overflows in Samba. A remote, unauthenticated attacker could send a specially-crafted RPC request that would cause the Samba daemon to crash or, possibly, execute arbitrary code with the privileges of the root user.

  Tags:  samba red rpc server-message-block open-source-implementation samba-suite  

• April 11, 2012
• 7:21

  Red Hat Security Advisory 2012-0466-01

   » ‎ Packet Storm Security Advisories
  Red Hat Security Advisory 2012-0466-01 - Samba is an open-source implementation of the Server Message Block or Common Internet File System protocol, which allows PC-compatible machines to share files, printers, and other information. A flaw in the Samba suite's Perl-based DCE/RPC IDL compiler, used to generate code to handle RPC calls, resulted in multiple buffer overflows in Samba. A remote, unauthenticated attacker could send a specially-crafted RPC request that would cause the Samba daemon to crash or, possibly, execute arbitrary code with the privileges of the root user.

  Tags:  samba red rpc server-message-block open-source-implementation samba-suite  

• 7:21

  Red Hat Security Advisory 2012-0466-01

   » ‎ Packet Storm Security Recent Files
  Red Hat Security Advisory 2012-0466-01 - Samba is an open-source implementation of the Server Message Block or Common Internet File System protocol, which allows PC-compatible machines to share files, printers, and other information. A flaw in the Samba suite's Perl-based DCE/RPC IDL compiler, used to generate code to handle RPC calls, resulted in multiple buffer overflows in Samba. A remote, unauthenticated attacker could send a specially-crafted RPC request that would cause the Samba daemon to crash or, possibly, execute arbitrary code with the privileges of the root user.

  Tags:  samba red rpc server-message-block open-source-implementation samba-suite  

• 7:21

  Red Hat Security Advisory 2012-0466-01

   » ‎ Packet Storm Security Misc. Files
  Red Hat Security Advisory 2012-0466-01 - Samba is an open-source implementation of the Server Message Block or Common Internet File System protocol, which allows PC-compatible machines to share files, printers, and other information. A flaw in the Samba suite's Perl-based DCE/RPC IDL compiler, used to generate code to handle RPC calls, resulted in multiple buffer overflows in Samba. A remote, unauthenticated attacker could send a specially-crafted RPC request that would cause the Samba daemon to crash or, possibly, execute arbitrary code with the privileges of the root user.

  Tags:  samba red rpc server-message-block open-source-implementation samba-suite  

• 7:20

  Red Hat Security Advisory 2012-0465-01

   » ‎ Packet Storm Security Advisories
  Red Hat Security Advisory 2012-0465-01 - Samba is an open-source implementation of the Server Message Block or Common Internet File System protocol, which allows PC-compatible machines to share files, printers, and other information. A flaw in the Samba suite's Perl-based DCE/RPC IDL compiler, used to generate code to handle RPC calls, resulted in multiple buffer overflows in Samba. A remote, unauthenticated attacker could send a specially-crafted RPC request that would cause the Samba daemon to crash or, possibly, execute arbitrary code with the privileges of the root user.

  Tags:  samba red rpc server-message-block open-source-implementation samba-suite  

• February 21, 2012
• 7:36

  Red Hat Security Advisory 2012-0313-03

   » ‎ Packet Storm Security Advisories
  Red Hat Security Advisory 2012-0313-03 - Samba is an open-source implementation of the Server Message Block or Common Internet File System protocol, which allows PC-compatible machines to share files, printers, and other information. The default Samba server configuration enabled both the "wide links" and "unix extensions" options, allowing Samba clients with write access to a share to create symbolic links that point to any location on the file system. Clients connecting with CIFS UNIX extensions disabled could have such links resolved on the server, allowing them to access and possibly overwrite files outside of the share. With this update, "wide links" is set to "no" by default. In addition, the update ensures "wide links" is disabled for shares that have "unix extensions" enabled.

  Tags:  server unix samba server-message-block open-source-implementation samba-clients  

• 7:36

  Red Hat Security Advisory 2012-0313-03

   » ‎ Packet Storm Security Recent Files
  Red Hat Security Advisory 2012-0313-03 - Samba is an open-source implementation of the Server Message Block or Common Internet File System protocol, which allows PC-compatible machines to share files, printers, and other information. The default Samba server configuration enabled both the "wide links" and "unix extensions" options, allowing Samba clients with write access to a share to create symbolic links that point to any location on the file system. Clients connecting with CIFS UNIX extensions disabled could have such links resolved on the server, allowing them to access and possibly overwrite files outside of the share. With this update, "wide links" is set to "no" by default. In addition, the update ensures "wide links" is disabled for shares that have "unix extensions" enabled.

  Tags:  server unix samba server-message-block open-source-implementation samba-clients  

• 7:36

  Red Hat Security Advisory 2012-0313-03

   » ‎ Packet Storm Security Misc. Files
  Red Hat Security Advisory 2012-0313-03 - Samba is an open-source implementation of the Server Message Block or Common Internet File System protocol, which allows PC-compatible machines to share files, printers, and other information. The default Samba server configuration enabled both the "wide links" and "unix extensions" options, allowing Samba clients with write access to a share to create symbolic links that point to any location on the file system. Clients connecting with CIFS UNIX extensions disabled could have such links resolved on the server, allowing them to access and possibly overwrite files outside of the share. With this update, "wide links" is set to "no" by default. In addition, the update ensures "wide links" is disabled for shares that have "unix extensions" enabled.

  Tags:  server unix samba server-message-block open-source-implementation samba-clients