Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

samba samba 3.5.9 vulnerabilities and exploits

(subscribe to this query)
1000
VMScore
CVE-2015-0240
The Netlogon server implementation in smbd in Samba 3.5.x and 3.6.x prior to 3.6.25, 4.0.x prior to 4.0.25, 4.1.x prior to 4.1.17, and 4.2.x prior to 4.2.0rc5 performs a free operation on an uninitialized stack pointer, which allows remote malicious users to execute arbitrary cod...
Redhat Enterprise Linux 7.0Redhat Enterprise Linux 6.0Redhat Enterprise Linux 5Samba Samba 4.1.9Samba Samba 3.6.24Samba Samba 4.0.14Samba Samba 3.6.17Samba Samba 4.0.24Samba Samba 3.5.1Samba Samba 4.1.16Samba Samba 4.1.12Samba Samba 4.0.2Samba Samba 4.2.0Samba Samba 3.5.9Samba Samba 4.1.14Samba Samba 3.6.10Samba Samba 3.5.7Samba Samba 4.0.22Samba Samba 4.0.11Samba Samba 4.1.7Samba Samba 4.0.3Samba Samba 3.5.11
1000
VMScore
CVE-2012-1182
The RPC code generator in Samba 3.x prior to 3.4.16, 3.5.x prior to 3.5.14, and 3.6.x prior to 3.6.4 does not implement validation of an array length in a manner consistent with validation of array memory allocation, which allows remote malicious users to execute arbitrary code v...
Samba Samba 3.4.0Samba Samba 3.4.14Samba Samba 3.4.5Samba Samba 3.4.6Samba Samba 3.3.15Samba Samba 3.3.16Samba Samba 3.3.5Samba Samba 3.3.4Samba Samba 3.3.3Samba Samba 3.2.4Samba Samba 3.2.3Samba Samba 3.2.11Samba Samba 3.2.12Samba Samba 3.0.14Samba Samba 3.0.29Samba Samba 3.0.1Samba Samba 3.0.0Samba Samba 3.0.23bSamba Samba 3.0.23cSamba Samba 3.0.21Samba Samba 3.0.21aSamba Samba 3.0.6
685
VMScore
CVE-2011-2522
Multiple cross-site request forgery (CSRF) vulnerabilities in the Samba Web Administration Tool (SWAT) in Samba 3.x prior to 3.5.10 allow remote malicious users to hijack the authentication of administrators for requests that (1) shut down daemons, (2) start daemons, (3) add shar...
Samba SambaDebian Debian Linux 5.0Debian Debian Linux 7.0Debian Debian Linux 6.0Canonical Ubuntu Linux 10.10Canonical Ubuntu Linux 11.04Canonical Ubuntu Linux 8.04Canonical Ubuntu Linux 10.04
578
VMScore
CVE-2012-2111
The (1) CreateAccount, (2) OpenAccount, (3) AddAccountRights, and (4) RemoveAccountRights LSA RPC procedures in smbd in Samba 3.4.x prior to 3.4.17, 3.5.x prior to 3.5.15, and 3.6.x prior to 3.6.5 do not properly restrict modifications to the privileges database, which allows rem...
Samba Samba 3.4.4Samba Samba 3.4.5Samba Samba 3.4.12Samba Samba 3.4.13Samba Samba 3.4.1Samba Samba 3.4.2Samba Samba 3.4.3Samba Samba 3.4.10Samba Samba 3.4.11Samba Samba 3.4.0Samba Samba 3.4.8Samba Samba 3.4.9Samba Samba 3.4.16Samba Samba 3.4.6Samba Samba 3.4.7Samba Samba 3.4.14Samba Samba 3.4.15Samba Samba 3.5.2Samba Samba 3.5.3Samba Samba 3.5.11Samba Samba 3.5.12Samba Samba 3.5.0
454
VMScore
CVE-2013-0214
Cross-site request forgery (CSRF) vulnerability in the Samba Web Administration Tool (SWAT) in Samba 3.x prior to 3.5.21, 3.6.x prior to 3.6.12, and 4.x prior to 4.0.2 allows remote malicious users to hijack the authentication of arbitrary users by leveraging knowledge of a passw...
Samba Samba 3.6.5Samba Samba 3.6.6Samba Samba 3.6.1Samba Samba 3.6.2Samba Samba 3.6.9Samba Samba 3.6.10Samba Samba 3.6.3Samba Samba 3.6.4Samba Samba 3.6.11Samba Samba 3.6.0Samba Samba 3.6.7Samba Samba 3.6.8Samba Samba 4.0.0Samba Samba 4.0.1Samba Samba 3.5.14Samba Samba 3.5.13Samba Samba 3.5.6Samba Samba 3.5.5Samba Samba 3.4.15Samba Samba 3.4.14Samba Samba 3.4.7Samba Samba 3.4.6
454
VMScore
CVE-2013-0213
The Samba Web Administration Tool (SWAT) in Samba 3.x prior to 3.5.21, 3.6.x prior to 3.6.12, and 4.x prior to 4.0.2 allows remote malicious users to conduct clickjacking attacks via a (1) FRAME or (2) IFRAME element.
Samba Samba 3.5.15Samba Samba 3.5.14Samba Samba 3.5.6Samba Samba 3.5.5Samba Samba 3.4.16Samba Samba 3.4.15Samba Samba 3.4.8Samba Samba 3.4.7Samba Samba 3.4.6Samba Samba 3.3.9Samba Samba 3.3.10Samba Samba 3.3.12Samba Samba 3.3.13Samba Samba 3.2.0Samba Samba 3.2.14Samba Samba 3.2.7Samba Samba 3.2.2Samba Samba 3.1.0Samba Samba 3.0.28Samba Samba 3.0.16Samba Samba 3.0.15Samba Samba 3.0.11
107
VMScore
CVE-2011-2724
The check_mtab function in client/mount.cifs.c in mount.cifs in smbfs in Samba 3.5.10 and previous versions does not properly verify that the (1) device name and (2) mountpoint strings are composed of valid characters, which allows local users to cause a denial of service (mtab c...
Samba Samba 3.0.19Samba Samba 3.0.23Samba Samba 3.0.14aSamba Samba 2.2.1aSamba Samba 3.0.27Samba Samba 3.0.31Samba Samba 3.0.3Samba Samba 2.0.10Samba Samba 2.2.12Samba Samba 3.0.8Samba Samba 3.2.15Samba Samba 3.3.3Samba Samba 2.2.3Samba Samba 3.5.1Samba Samba 3.0.29Samba Samba 3.0.25Samba Samba 2.0.1Samba Samba 3.0.25bSamba Samba 3.2.5Samba Samba 3.4.2Samba Samba 2.2.3aSamba Samba 3.5.9
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook