[SECURITY] [DSA 3171-1] samba security update

2015-02-2311:48:45

lists.debian.org

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

9.8 High

AI Score

Confidence

High

0.974 High

EPSS

Percentile

99.9%

JSON

Debian Security Advisory DSA-3171-1 [email protected]
http://www.debian.org/security/ Salvatore Bonaccorso
February 23, 2015 http://www.debian.org/security/faq

Package : samba
CVE ID : CVE-2015-0240

Richard van Eeden of Microsoft Vulnerability Research discovered that
Samba, a SMB/CIFS file, print, and login server for Unix, contains a
flaw in the netlogon server code which allows remote code execution with
root privileges from an unauthenticated connection.

For the stable distribution (wheezy), this problem has been fixed in
version 2:3.6.6-6+deb7u5.

We recommend that you upgrade your samba packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: [email protected]

OSVersionArchitecturePackageVersionFilename
Debian7allsamba< 2:3.6.6-6+deb7u5samba_2:3.6.6-6+deb7u5_all.deb
Debian7s390winbind< 2:3.6.6-6+deb7u5winbind_2:3.6.6-6+deb7u5_s390.deb
Debian6amd64samba-common-bin< 2:3.5.6~dfsg-3squeeze12samba-common-bin_2:3.5.6~dfsg-3squeeze12_amd64.deb
Debian7ia64libpam-winbind< 2:3.6.6-6+deb7u5libpam-winbind_2:3.6.6-6+deb7u5_ia64.deb
Debian7allsamba-doc< 2:3.6.6-6+deb7u5samba-doc_2:3.6.6-6+deb7u5_all.deb
Debian7mipselswat< 2:3.6.6-6+deb7u5swat_2:3.6.6-6+deb7u5_mipsel.deb
Debian7kfreebsd-i386libnss-winbind< 2:3.6.6-6+deb7u5libnss-winbind_2:3.6.6-6+deb7u5_kfreebsd-i386.deb
Debian7armelsamba-common-bin< 2:3.6.6-6+deb7u5samba-common-bin_2:3.6.6-6+deb7u5_armel.deb
Debian7armhflibwbclient0< 2:3.6.6-6+deb7u5libwbclient0_2:3.6.6-6+deb7u5_armhf.deb
Debian7i386libpam-winbind< 2:3.6.6-6+deb7u5libpam-winbind_2:3.6.6-6+deb7u5_i386.deb

OS	Version	Architecture	Package	Version	Filename
Debian	7	all	samba	< 2:3.6.6-6+deb7u5	samba_2:3.6.6-6+deb7u5_all.deb
Debian	7	s390	winbind	< 2:3.6.6-6+deb7u5	winbind_2:3.6.6-6+deb7u5_s390.deb
Debian	6	amd64	samba-common-bin	< 2:3.5.6~dfsg-3squeeze12	samba-common-bin_2:3.5.6~dfsg-3squeeze12_amd64.deb
Debian	7	ia64	libpam-winbind	< 2:3.6.6-6+deb7u5	libpam-winbind_2:3.6.6-6+deb7u5_ia64.deb
Debian	7	all	samba-doc	< 2:3.6.6-6+deb7u5	samba-doc_2:3.6.6-6+deb7u5_all.deb
Debian	7	mipsel	swat	< 2:3.6.6-6+deb7u5	swat_2:3.6.6-6+deb7u5_mipsel.deb
Debian	7	kfreebsd-i386	libnss-winbind	< 2:3.6.6-6+deb7u5	libnss-winbind_2:3.6.6-6+deb7u5_kfreebsd-i386.deb
Debian	7	armel	samba-common-bin	< 2:3.6.6-6+deb7u5	samba-common-bin_2:3.6.6-6+deb7u5_armel.deb
Debian	7	armhf	libwbclient0	< 2:3.6.6-6+deb7u5	libwbclient0_2:3.6.6-6+deb7u5_armhf.deb
Debian	7	i386	libpam-winbind	< 2:3.6.6-6+deb7u5	libpam-winbind_2:3.6.6-6+deb7u5_i386.deb