[SECURITY] [DLA 156-1] samba security update

2015-02-2317:00:36

lists.debian.org

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

8.1 High

AI Score

Confidence

High

0.974 High

EPSS

Percentile

99.9%

JSON

Package : samba
Version : 2:3.5.6~dfsg-3squeeze12
CVE ID : CVE-2015-0240
Debian Bug : 779033

Richard van Eeden of Microsoft Vulnerability Research discovered that
Samba, a SMB/CIFS file, print, and login server for Unix, contains a
flaw in the netlogon server code which allows remote code execution with
root privileges from an unauthenticated connection.

For the oldstable distribution (squeeze), this problem has been fixed in
version 2:3.5.6~dfsg-3squeeze12.

For the stable distribution (wheezy), this problem has been fixed in
version 2:3.6.6-6+deb7u5.

We recommend that you upgrade your samba packages.

Raphaël Hertzog ◈ Debian Developer

Support Debian LTS: http://www.freexian.com/services/debian-lts.html
Learn to master Debian: http://debian-handbook.info/get/
Attachment:
signature.asc
Description: Digital signature

OSVersionArchitecturePackageVersionFilename
Debian7i386libnss-winbind< 2:3.6.6-6+deb7u5libnss-winbind_2:3.6.6-6+deb7u5_i386.deb
Debian7s390smbclient< 2:3.6.6-6+deb7u5smbclient_2:3.6.6-6+deb7u5_s390.deb
Debian6i386samba< 2:3.5.6~dfsg-3squeeze12samba_2:3.5.6~dfsg-3squeeze12_i386.deb
Debian7mipslibwbclient-dev< 2:3.6.6-6+deb7u5libwbclient-dev_2:3.6.6-6+deb7u5_mips.deb
Debian7armellibwbclient-dev< 2:3.6.6-6+deb7u5libwbclient-dev_2:3.6.6-6+deb7u5_armel.deb
Debian7ia64winbind< 2:3.6.6-6+deb7u5winbind_2:3.6.6-6+deb7u5_ia64.deb
Debian6amd64samba-dbg< 2:3.5.6~dfsg-3squeeze12samba-dbg_2:3.5.6~dfsg-3squeeze12_amd64.deb
Debian7sparclibwbclient-dev< 2:3.6.6-6+deb7u5libwbclient-dev_2:3.6.6-6+deb7u5_sparc.deb
Debian7powerpclibwbclient0< 2:3.6.6-6+deb7u5libwbclient0_2:3.6.6-6+deb7u5_powerpc.deb
Debian7ia64libpam-smbpass< 2:3.6.6-6+deb7u5libpam-smbpass_2:3.6.6-6+deb7u5_ia64.deb

OS	Version	Architecture	Package	Version	Filename
Debian	7	i386	libnss-winbind	< 2:3.6.6-6+deb7u5	libnss-winbind_2:3.6.6-6+deb7u5_i386.deb
Debian	7	s390	smbclient	< 2:3.6.6-6+deb7u5	smbclient_2:3.6.6-6+deb7u5_s390.deb
Debian	6	i386	samba	< 2:3.5.6~dfsg-3squeeze12	samba_2:3.5.6~dfsg-3squeeze12_i386.deb
Debian	7	mips	libwbclient-dev	< 2:3.6.6-6+deb7u5	libwbclient-dev_2:3.6.6-6+deb7u5_mips.deb
Debian	7	armel	libwbclient-dev	< 2:3.6.6-6+deb7u5	libwbclient-dev_2:3.6.6-6+deb7u5_armel.deb
Debian	7	ia64	winbind	< 2:3.6.6-6+deb7u5	winbind_2:3.6.6-6+deb7u5_ia64.deb
Debian	6	amd64	samba-dbg	< 2:3.5.6~dfsg-3squeeze12	samba-dbg_2:3.5.6~dfsg-3squeeze12_amd64.deb
Debian	7	sparc	libwbclient-dev	< 2:3.6.6-6+deb7u5	libwbclient-dev_2:3.6.6-6+deb7u5_sparc.deb
Debian	7	powerpc	libwbclient0	< 2:3.6.6-6+deb7u5	libwbclient0_2:3.6.6-6+deb7u5_powerpc.deb
Debian	7	ia64	libpam-smbpass	< 2:3.6.6-6+deb7u5	libpam-smbpass_2:3.6.6-6+deb7u5_ia64.deb