Lucene search
Gentoo FoundationMGASA-2014-0138HistoryMar 23, 2014 - 1:10 p.m.
Updated samba packages fix security vulnerability
2014-03-2313:10:03
Gentoo Foundation
advisories.mageia.org
12
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.005 Low
EPSS
Percentile
77.1%
In Samba before 3.6.23, the SAMR server neglects to ensure that attempted password changes will update the bad password count, and does not set the lockout flags. This would allow a user unlimited attempts against the password by simply calling ChangePasswordUser2 repeatedly. This is available without any other authentication (CVE-2013-4496)
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Mageia | 3 | noarch | samba | < 3.6.15-1.4 | samba-3.6.15-1.4.mga3 |
| Mageia | 4 | noarch | samba | < 3.6.23-1 | samba-3.6.23-1.mga4 |
Related
prion
prion
Design/Logic Flaw
2014-03-14 10:55:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2014:0497-1)
2021-06-09 00:00:00
Mageia: Security Advisory (MGASA-2014-0138)
2022-01-28 00:00:00
Samba >= 3.4.0 Credentials Management Errors Vulnerability (CVE-2013-4496)
2021-09-24 00:00:00
nessus
nessus
Oracle Solaris Third-Party Patch Update : samba (cve_2013_4496_credentials_management)
2015-01-19 00:00:00
SuSE 11.3 Security Update : Samba (SAT Patch Number 9010)
2014-04-08 00:00:00
ubuntucve
ubuntucve
CVE-2013-4496
2014-03-14 00:00:00
debiancve
debiancve
CVE-2013-4496
2014-03-14 10:55:00
suse
suse
Security update for Samba (important)
2014-04-08 23:04:47
Security update for samba (important)
2016-04-20 12:07:48
Security update for samba (important)
2016-04-20 12:11:11
cve
cve
CVE-2013-4496
2014-03-14 10:55:00
ubuntu
ubuntu
Samba vulnerability
2014-03-26 00:00:00
samba
samba
CVE-2013-4496: Password lockout not enforced for SAMR password changes
2014-03-11 00:00:00
oraclelinux
oraclelinux
samba and samba3x security update
2014-03-25 00:00:00
samba4 security update
2014-04-09 00:00:00
samba security and bug fix update
2018-06-25 00:00:00
centos
centos
libsmbclient, samba, samba3x security update
2014-03-25 15:09:56
samba4 security update
2014-04-09 19:17:37
altlinux
altlinux
Security fix for the ALT Linux 8 package samba version 4.1.6-alt1
2014-03-17 00:00:00
Security fix for the ALT Linux 8 package samba-DC version 4.1.6-alt1
2014-03-17 00:00:00
Security fix for the ALT Linux 10 package samba version 4.1.6-alt1
2014-03-17 00:00:00
freebsd
freebsd
samba -- multiple vulnerabilities
2014-03-11 00:00:00
slackware
slackware
[slackware-security] samba
2014-03-14 06:48:32
securityvulns
securityvulns
Samba restrictions bypass
2014-03-18 00:00:00
[slackware-security] samba (SSA:2014-072-01)
2014-03-18 00:00:00
redhat
redhat
(RHSA-2014:0330) Moderate: samba and samba3x security update
2014-03-25 00:00:00
(RHSA-2014:0383) Moderate: samba4 security update
2014-04-09 00:00:00
veracode
veracode
Improper Handling Of Credentials
2019-05-02 04:57:33
Privilege Escalation
2019-05-02 04:57:33
fedora
fedora
[SECURITY] Fedora 20 Update: samba-4.1.6-1.fc20
2014-03-15 15:15:35
[SECURITY] Fedora 19 Update: samba-4.0.16-1.fc19
2014-03-28 03:18:38
[SECURITY] Fedora 20 Update: samba-4.1.9-3.fc20
2014-06-26 01:52:55
gentoo
gentoo
Samba: Multiple vulnerabilities
2015-02-25 00:00:00
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.005 Low
EPSS
Percentile
77.1%
Related for MGASA-2014-0138