Ron Ben Yizhak

**Name of the Vulnerable Software and Affected Versions** Samba versions prior to 4.22.10 Samba versions prior to 4.23.8 Samba versions prior to 4.24.3 **Description** A flaw exists in the Samba printing subsystem where the software passes a client-controlled job description string to the command configured in the "print command" setting using the `%J` substitution character. Because shell meta characters are not escaped, an unauthenticated remote attacker can send a specially crafted print job description containing unescaped shell characters to execute arbitrary code on the affected system. This issue is particularly critical on servers with guest printer share access or unsafe default configurations. **Recommendations** Update to version 4.22.10. Update to version 4.23.8. Update to version 4.24.3. As a temporary workaround, remove `%J` from the "print command" configurations in the `smb.conf` file.

**Name of the Vulnerable Software and Affected Versions** GNU inetutils versions through 2.7 **Description** A privilege escalation issue exists in telnetd within GNU inetutils. The issue stems from improper handling of the `CREDENTIALS DIRECTORY` environment variable, introduced with systemd service credentials support in the login(1) implementation of util-linux release 2.40. An unprivileged local user can exploit this by creating a login.noauth file. **Recommendations** Update to a version of GNU inetutils later than 2.7.

**Name of the Vulnerable Software and Affected Versions** Windows versions prior to July 2025 **Description** A flaw exists in Windows related to the external control of file names or paths within Windows Storage. This issue allows an attacker to perform spoofing attacks over a network. The vulnerability, known as EPM Poisoning (CVE-2025-49760), impacts the core RPC system and can allow attackers to impersonate trusted services, including potentially hijacking DNS and even spoofing Windows Defender’s ID. Successful exploitation could lead to full Active Directory compromise and the theft of machine credentials. The vulnerability allows a local unprivileged attacker to manipulate Windows Storage Service and extract local machine's NTLM credentials. **Recommendations** Update Windows to the July 2025 version or later to address this vulnerability.