CVE

Id
67587  
CVE No.
CVE-2014-0178  
Status
Candidate  
Description
Samba 3.6.6 through 3.6.23, 4.0.x before 4.0.18, and 4.1.x before 4.1.8, when a certain vfs shadow copy configuration is enabled, does not properly initialize the SRV_SNAPSHOT_ARRAY response field, which allows remote authenticated users to obtain potentially sensitive information from process memory via a (1) FSCTL_GET_SHADOW_COPY_DATA or (2) FSCTL_SRV_ENUMERATE_SNAPSHOTS request.  
Phase
Assigned (20131203)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
651864 67587 CVE-2014-0178 BUGTRAQ:20140711 [ MDVSA-2014:136 ] samba  View
651865 67587 CVE-2014-0178 URL:http://www.securityfocus.com/archive/1/archive/1/532757/100/0/threaded  View
651866 67587 CVE-2014-0178 CONFIRM:http://www.samba.org/samba/security/CVE-2014-0178  View
651867 67587 CVE-2014-0178 CONFIRM:http://advisories.mageia.org/MGASA-2014-0279.html  View
651868 67587 CVE-2014-0178 CONFIRM:https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05115993  View
651869 67587 CVE-2014-0178 FEDORA:FEDORA-2014-9132  View
651870 67587 CVE-2014-0178 URL:http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136864.html  View
651871 67587 CVE-2014-0178 FEDORA:FEDORA-2014-7672  View
651872 67587 CVE-2014-0178 URL:http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134717.html  View
651873 67587 CVE-2014-0178 GENTOO:GLSA-201502-15  View
651874 67587 CVE-2014-0178 URL:http://security.gentoo.org/glsa/glsa-201502-15.xml  View
651875 67587 CVE-2014-0178 MANDRIVA:MDVSA-2014:136  View
651876 67587 CVE-2014-0178 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2014:136  View
651877 67587 CVE-2014-0178 MANDRIVA:MDVSA-2015:082  View
651878 67587 CVE-2014-0178 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2015:082  View
651879 67587 CVE-2014-0178 BID:67686  View
651880 67587 CVE-2014-0178 URL:http://www.securityfocus.com/bid/67686  View
651881 67587 CVE-2014-0178 SECTRACK:1030308  View
651882 67587 CVE-2014-0178 URL:http://www.securitytracker.com/id/1030308  View
651883 67587 CVE-2014-0178 SECUNIA:59378  View
651884 67587 CVE-2014-0178 URL:http://secunia.com/advisories/59378  View
651885 67587 CVE-2014-0178 SECUNIA:59579  View
651886 67587 CVE-2014-0178 URL:http://secunia.com/advisories/59579  View
651887 67587 CVE-2014-0178 SECUNIA:59407  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
14051 JVNDB-2014-002926 Red Hat Enterprise Linux の Apache Tomcat 7 用の特定の tomcat7 パッケージにおけるサービス運用妨害 (DoS) の脆弱性 Red Hat Enterprise Linux (RHEL) の Apache Tomcat 7 用の特定の tomcat7 パッケージには、サービス運用妨害 (CPU 資源の消費) 状態にされる脆弱性が存在します。 CVE-2014-0186 67587 5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-002926.html  View