Lucene search
IBM85D41384B88C530DBAB70791D41DFCF1CF314D456CBDB72E9AFA9ACC54A10939HistoryJun 18, 2018 - 12:35 a.m.
Security Bulletin: Samba vulnerability issue on IBM Storwize V7000 Unified
2018-06-1800:35:38
www.ibm.com
28
0.973 High
EPSS
Percentile
99.9%
Summary
IBM Storwize V7000 Unified is shipped with Samba, for which a fix is available for security vulnerabilities.
Vulnerability Details
Samba is used in IBM Storwize V7000 Unified to enable file management and authentication services for Microsoft Windows environments.
CVEID: CVE-2017-7494**
DESCRIPTION:** Samba could allow a remote authenticated attacker to execute arbitrary code on the system, caused by improper access to named pipe endpoints. By uploading a specially-crafted shared library to a writeable share, an attacker could exploit this vulnerability to execute arbitrary code on the system.
CVSS Base Score: 7.5
CVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/126417 for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Affected Products and Versions
IBM Storwize V7000 Unified
The product is affected when running code releases 1.5.0.0 to 1.6.2.1
Remediation/Fixes
A fix for this issue is in version 1.6.2.2 of IBM Storwize V7000 Unified. Version 1.5 is end of service. Customers running on this release of IBM Storwize V7000 Unified can upgrade to v1.6.2.2 for a fix.
Latest Storwize V7000 Unified Software
Workarounds and Mitigations
None
| CPE | Name | Operator | Version |
|---|---|---|---|
| ibm storwize v7000 unified (2073) | eq | 1.5 | |
| ibm storwize v7000 unified (2073) | eq | 1.6 |
Related
redhat
redhat
(RHSA-2017:1271) Important: samba4 security update
2017-05-24 07:26:37
(RHSA-2017:1390) Important: samba security update
2017-06-05 05:47:14
(RHSA-2017:1270) Important: samba security update
2017-05-24 07:26:01
nessus
nessus
RHEL 6 : samba4 (RHSA-2017:1271) (SambaCry)
2017-05-25 00:00:00
Oracle Linux 6 : samba4 (ELSA-2017-1271) (SambaCry)
2017-05-25 00:00:00
RHEL 5 : samba3x (RHSA-2017:1272) (SambaCry)
2017-05-26 00:00:00
securelist
securelist
SambaCry is coming
2017-06-09 22:07:16
centos
centos
ctdb, libsmbclient, libwbclient, samba security update
2017-05-25 13:08:37
samba4 security update
2017-05-25 13:07:15
ubuntu
ubuntu
Samba vulnerability
2017-05-24 00:00:00
Samba vulnerability
2017-05-24 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-3860-1)
2017-05-23 00:00:00
Fedora Update for samba FEDORA-2017-642a0eca75
2017-05-27 00:00:00
RedHat Update for samba4 RHSA-2017:1271-01
2017-05-25 00:00:00
threatpost
threatpost
Cisco, Netgear Readying Patches for Samba Vulnerability
2017-05-31 13:51:56
Attackers Mining Cryptocurrency Using Exploits for Samba Vulnerability
2017-06-12 09:34:17
Samba Patches Critical Bug Exploitable With One Line Of Code
2017-05-25 12:20:32
fedora
fedora
[SECURITY] Fedora 25 Update: samba-4.5.10-0.fc25
2017-05-27 03:06:08
[SECURITY] Fedora 26 Update: samba-4.6.4-0.fc26
2017-06-03 17:39:59
[SECURITY] Fedora 24 Update: samba-4.4.14-0.fc24
2017-05-27 02:53:53
cisa_kev
cisa_kev
Samba Remote Code Execution Vulnerability
2023-03-30 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 8 package samba-DC version 4.6.4-alt1
2017-05-24 00:00:00
Security fix for the ALT Linux 10 package samba version 4.6.4-alt1.S1
2017-05-24 00:00:00
Security fix for the ALT Linux 8 package samba version 4.6.4-alt1
2017-05-24 00:00:00
packetstorm
packetstorm
Samba 3.5.0 Remote Code Execution
2017-05-25 00:00:00
Samba is_known_pipename() Arbitrary Module Load
2017-05-27 00:00:00
Samba is_known_pipename() Code Execution
2017-06-02 00:00:00
samba
samba
Remote code execution from a writable share.
2017-05-24 00:00:00
myhack58
myhack58
Samba remote code execution vulnerability(CVE-2017-7494)-SambaCry analysis report-vulnerability warning-the black bar safety net
2017-05-28 00:00:00
Vulnerability warning|Samba remote code execution vulnerability, affecting 7 years ago version-bug warning-the black bar safety net
2017-05-25 00:00:00
SambaCry exploit analysis-exploit warning-the black bar safety net
2017-06-13 00:00:00
ibm
ibm
exploitpack
exploitpack
Samba 3.5.0 - Remote Code Execution
2017-05-24 00:00:00
veracode
veracode
Remote Code Execution (RCE)
2019-01-15 09:17:29
archlinux
archlinux
[ASA-201705-22] samba: arbitrary code execution
2017-05-30 00:00:00
thn
thn
Warning! Hackers Started Using "SambaCry Flaw" to Hack Linux Systems
2017-06-10 01:16:00
CowerSnail — Windows Backdoor from the Creators of SambaCry Linux Malware
2017-07-27 00:40:00
7-Year-Old Samba Flaw Lets Hackers Access Thousands of Linux PCs Remotely
2017-05-24 20:23:00
suse
suse
Security update for samba (important)
2017-05-24 15:09:57
Security update for samba (important)
2017-05-24 15:09:27
Security update for samba (important)
2017-05-26 18:09:30
debian
debian
[SECURITY] [DSA 3860-1] samba security update
2017-05-24 07:35:00
[SECURITY] [DSA 3860-1] samba security update
2017-05-24 07:35:00
[SECURITY] [DLA 951-1] samba security update
2017-05-24 08:11:20
ubuntucve
ubuntucve
CVE-2017-7494
2017-05-24 00:00:00
checkpoint_advisories
checkpoint_advisories
Linux EternalRed Samba Remote Code Execution (CVE-2017-7494)
2017-05-25 00:00:00
zdt
zdt
Samba is_known_pipename() Arbitrary Module Load Exploit
2017-05-30 00:00:00
Samba 3.5.0 - Remote code execution Exploit
2017-05-25 00:00:00
saint
saint
Samba shared library upload and execution
2017-06-08 00:00:00
Samba shared library upload and execution
2017-06-08 00:00:00
Samba shared library upload and execution
2017-06-08 00:00:00
slackware
slackware
[slackware-security] samba
2017-05-24 20:34:46
attackerkb
attackerkb
CVE-2017-7494
2017-05-30 00:00:00
redhatcve
redhatcve
CVE-2017-7494
2021-03-13 22:06:40
osv
osv
samba - security update
2017-05-24 00:00:00
CVE-2017-7494
2017-05-30 18:29:00
samba - security update
2017-05-24 00:00:00
ics
ics
Potential Legacy Risk from Malware Targeting QNAP NAS Devices
2020-08-06 12:00:00
nvd
nvd
CVE-2017-7494
2017-05-30 18:29:00
debiancve
debiancve
CVE-2017-7494
2017-05-30 18:29:00
metasploit
metasploit
Samba is_known_pipename() Arbitrary Module Load
2017-05-25 00:42:04
seebug
seebug
Samba remote code execution vulnerability(CVE-2017-7494)
2017-05-25 00:00:00
freebsd
freebsd
samba -- remote code execution vulnerability
2017-05-24 00:00:00
oraclelinux
oraclelinux
samba security update
2017-05-24 00:00:00
samba3x security update
2017-05-26 00:00:00
samba4 security update
2017-05-24 00:00:00
huawei
huawei
alpinelinux
alpinelinux
CVE-2017-7494
2017-05-30 18:29:00
cvelist
cvelist
CVE-2017-7494
2017-05-30 18:00:00
f5
f5
K13551136 : Samba remote code execution vulnerability CVE-2017-7494
2017-05-25 00:00:00
rapid7community
rapid7community
Patching CVE-2017-7494 in Samba: It’s the Circle of Life
2017-05-27 02:51:04
Samba CVE-2017-7494: Scanning and Remediating in InsightVM and Nexpose
2017-05-25 21:22:37
qualysblog
qualysblog
Samba Vulnerability CVE-2017-7494
2017-05-26 20:32:57
talosblog
talosblog
Samba Vulnerability: Dancing Its Way to a Network Near You
2017-05-25 00:31:00
cve
cve
CVE-2017-7494
2017-05-30 18:29:00
cisa
cisa
Samba Releases Security Updates
2017-05-24 00:00:00
cisco
cisco
Vulnerability in Samba Affecting Cisco Products: May 2017
2017-05-30 19:30:00
avleonov
avleonov
New vulnersBot for Telegram with advanced searches and subscriptions
2017-05-28 10:59:52
canvas
canvas
Immunity Canvas: SAMBA_IS_KNOWN_PIPENAME
2017-05-30 18:29:00
prion
prion
Remote code execution
2017-05-30 18:29:00
exploitdb
exploitdb
Samba 3.5.0 - Remote Code Execution
2017-05-24 00:00:00
nmap
nmap
ovs-agent-version NSE Script
2011-03-02 07:39:31
http-sap-netweaver-leak NSE Script
2018-10-19 05:00:46
sslv2 NSE Script
2008-11-06 02:52:59
0.973 High
EPSS
Percentile
99.9%
Related for 85D41384B88C530DBAB70791D41DFCF1CF314D456CBDB72E9AFA9ACC54A10939