Oracle: Security Advisory (ELSA-2016-0612)
🗓️ 09 May 2016 00:00:00Reported by Copyright (C) 2016 Greenbone AGType
openvas🔗 plugins.openvas.org👁 42 Views
10
| Source | Link |
|---|---|
| linux | www.linux.oracle.com/errata/ELSA-2016-0612.html |
# SPDX-FileCopyrightText: 2016 Greenbone AG
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only
if(description)
{
script_oid("1.3.6.1.4.1.25623.1.0.122940");
script_cve_id("CVE-2015-5370", "CVE-2016-2110", "CVE-2016-2111", "CVE-2016-2112", "CVE-2016-2113", "CVE-2016-2114", "CVE-2016-2115", "CVE-2016-2118");
script_tag(name:"creation_date", value:"2016-05-09 11:24:56 +0000 (Mon, 09 May 2016)");
script_version("2025-01-23T05:37:39+0000");
script_tag(name:"last_modification", value:"2025-01-23 05:37:39 +0000 (Thu, 23 Jan 2025)");
script_tag(name:"cvss_base", value:"6.8");
script_tag(name:"cvss_base_vector", value:"AV:N/AC:M/Au:N/C:P/I:P/A:P");
script_tag(name:"severity_vector", value:"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H");
script_tag(name:"severity_origin", value:"NVD");
script_tag(name:"severity_date", value:"2019-09-27 17:17:00 +0000 (Fri, 27 Sep 2019)");
script_name("Oracle: Security Advisory (ELSA-2016-0612)");
script_category(ACT_GATHER_INFO);
script_copyright("Copyright (C) 2016 Greenbone AG");
script_family("Oracle Linux Local Security Checks");
script_dependencies("gather-package-list.nasl");
script_mandatory_keys("ssh/login/oracle_linux", "ssh/login/release", re:"ssh/login/release=(OracleLinux6|OracleLinux7)");
script_xref(name:"Advisory-ID", value:"ELSA-2016-0612");
script_xref(name:"URL", value:"https://linux.oracle.com/errata/ELSA-2016-0612.html");
script_tag(name:"summary", value:"The remote host is missing an update for the 'ipa, libldb, libtalloc, libtdb, libtevent, openchange, samba, samba4' package(s) announced via the ELSA-2016-0612 advisory.");
script_tag(name:"vuldetect", value:"Checks if a vulnerable package version is present on the target host.");
script_tag(name:"insight", value:"ipa
[4.2.0-15.0.1.6.1]
- Drop redhat-access-plugin-ipa requires for OL7
Blank out header-logo.png product-name.png
Replace login-screen-logo.png [20362818]
[4.2.0-15.6.1]
- Rebuild against newer Samba version
- Related: #1322690
libldb
[1.1.25-1]
- Rebase libldb to 1.1.25
- Related: rhbz#1322690
libtalloc
[2.1.5-1]
- Rebase to libtalloc 2.1.5
- Related: rhbz#1322690
libtdb
[1.3.8-1]
- Rebase libtdb to 1.3.8
- Related: rhbz#1322690
libtevent
[0.9.26-1]
- Rebase libtevent to 0.9.26
- Related: rhbz#1322690
openchange
[2.0-10]
- Add a patch to fix connection string (Related: #1322690)
samba
[4.2.10-6]
- Fix domain member winbind not being able to talk to trusted domains' DCs
- relates: #1322690
[4.2.10-5]
- Fix crash in smb.conf processing
- relates: #1322690
[4.2.10-4]
- Fix LDAP SASL bind with arcfour-hmac-md5
- resolves: #1322690
[4.2.10-3]
- Make sure the package owns /var/lib/samba and uses it for cache purposes
- resolves: #1322690
[4.2.10-2]
- Remove ldb modules and internal libraries for DC when not packaging DC build
- resolves: #1322690
[4.2.10-1]
- resolves: #1322690");
script_tag(name:"affected", value:"'ipa, libldb, libtalloc, libtdb, libtevent, openchange, samba, samba4' package(s) on Oracle Linux 6, Oracle Linux 7.");
script_tag(name:"solution", value:"Please install the updated package(s).");
script_tag(name:"solution_type", value:"VendorFix");
script_tag(name:"qod_type", value:"package");
exit(0);
}
include("revisions-lib.inc");
include("pkg-lib-rpm.inc");
release = rpm_get_ssh_release();
if(!release)
exit(0);
res = "";
report = "";
if(release == "OracleLinux6") {
if(!isnull(res = isrpmvuln(pkg:"ipa", rpm:"ipa~3.0.0~47.el6_7.2", rls:"OracleLinux6"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"ipa-admintools", rpm:"ipa-admintools~3.0.0~47.el6_7.2", rls:"OracleLinux6"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"ipa-client", rpm:"ipa-client~3.0.0~47.el6_7.2", rls:"OracleLinux6"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"ipa-python", rpm:"ipa-python~3.0.0~47.el6_7.2", rls:"OracleLinux6"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"ipa-server", rpm:"ipa-server~3.0.0~47.el6_7.2", rls:"OracleLinux6"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"ipa-server-selinux", rpm:"ipa-server-selinux~3.0.0~47.el6_7.2", rls:"OracleLinux6"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"ipa-server-trust-ad", rpm:"ipa-server-trust-ad~3.0.0~47.el6_7.2", rls:"OracleLinux6"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"ldb-tools", rpm:"ldb-tools~1.1.25~2.el6_7", rls:"OracleLinux6"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libldb", rpm:"libldb~1.1.25~2.el6_7", rls:"OracleLinux6"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libldb-devel", rpm:"libldb-devel~1.1.25~2.el6_7", rls:"OracleLinux6"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libtalloc", rpm:"libtalloc~2.1.5~1.el6_7", rls:"OracleLinux6"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libtalloc-devel", rpm:"libtalloc-devel~2.1.5~1.el6_7", rls:"OracleLinux6"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libtdb", rpm:"libtdb~1.3.8~1.el6_7", rls:"OracleLinux6"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libtdb-devel", rpm:"libtdb-devel~1.3.8~1.el6_7", rls:"OracleLinux6"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libtevent", rpm:"libtevent~0.9.26~2.el6_7", rls:"OracleLinux6"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libtevent-devel", rpm:"libtevent-devel~0.9.26~2.el6_7", rls:"OracleLinux6"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"openchange", rpm:"openchange~1.0~7.el6_7", rls:"OracleLinux6"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"openchange-client", rpm:"openchange-client~1.0~7.el6_7", rls:"OracleLinux6"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"openchange-devel", rpm:"openchange-devel~1.0~7.el6_7", rls:"OracleLinux6"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"openchange-devel-docs", rpm:"openchange-devel-docs~1.0~7.el6_7", rls:"OracleLinux6"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"pyldb", rpm:"pyldb~1.1.25~2.el6_7", rls:"OracleLinux6"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"pyldb-devel", rpm:"pyldb-devel~1.1.25~2.el6_7", rls:"OracleLinux6"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"pytalloc", rpm:"pytalloc~2.1.5~1.el6_7", rls:"OracleLinux6"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"pytalloc-devel", rpm:"pytalloc-devel~2.1.5~1.el6_7", rls:"OracleLinux6"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python-tdb", rpm:"python-tdb~1.3.8~1.el6_7", rls:"OracleLinux6"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python-tevent", rpm:"python-tevent~0.9.26~2.el6_7", rls:"OracleLinux6"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"samba4", rpm:"samba4~4.2.10~6.el6_7", rls:"OracleLinux6"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"samba4-client", rpm:"samba4-client~4.2.10~6.el6_7", rls:"OracleLinux6"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"samba4-common", rpm:"samba4-common~4.2.10~6.el6_7", rls:"OracleLinux6"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"samba4-dc", rpm:"samba4-dc~4.2.10~6.el6_7", rls:"OracleLinux6"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"samba4-dc-libs", rpm:"samba4-dc-libs~4.2.10~6.el6_7", rls:"OracleLinux6"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"samba4-devel", rpm:"samba4-devel~4.2.10~6.el6_7", rls:"OracleLinux6"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"samba4-libs", rpm:"samba4-libs~4.2.10~6.el6_7", rls:"OracleLinux6"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"samba4-pidl", rpm:"samba4-pidl~4.2.10~6.el6_7", rls:"OracleLinux6"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"samba4-python", rpm:"samba4-python~4.2.10~6.el6_7", rls:"OracleLinux6"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"samba4-test", rpm:"samba4-test~4.2.10~6.el6_7", rls:"OracleLinux6"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"samba4-winbind", rpm:"samba4-winbind~4.2.10~6.el6_7", rls:"OracleLinux6"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"samba4-winbind-clients", rpm:"samba4-winbind-clients~4.2.10~6.el6_7", rls:"OracleLinux6"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"samba4-winbind-krb5-locator", rpm:"samba4-winbind-krb5-locator~4.2.10~6.el6_7", rls:"OracleLinux6"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"tdb-tools", rpm:"tdb-tools~1.3.8~1.el6_7", rls:"OracleLinux6"))) {
report += res;
}
if(report != "") {
security_message(data:report);
} else if(__pkg_match) {
exit(99);
}
exit(0);
}
if(release == "OracleLinux7") {
if(!isnull(res = isrpmvuln(pkg:"ctdb", rpm:"ctdb~4.2.10~6.el7_2", rls:"OracleLinux7"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"ctdb-devel", rpm:"ctdb-devel~4.2.10~6.el7_2", rls:"OracleLinux7"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"ctdb-tests", rpm:"ctdb-tests~4.2.10~6.el7_2", rls:"OracleLinux7"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"ipa", rpm:"ipa~4.2.0~15.0.1.el7_2.6.1", rls:"OracleLinux7"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"ipa-admintools", rpm:"ipa-admintools~4.2.0~15.0.1.el7_2.6.1", rls:"OracleLinux7"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"ipa-client", rpm:"ipa-client~4.2.0~15.0.1.el7_2.6.1", rls:"OracleLinux7"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"ipa-python", rpm:"ipa-python~4.2.0~15.0.1.el7_2.6.1", rls:"OracleLinux7"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"ipa-server", rpm:"ipa-server~4.2.0~15.0.1.el7_2.6.1", rls:"OracleLinux7"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"ipa-server-dns", rpm:"ipa-server-dns~4.2.0~15.0.1.el7_2.6.1", rls:"OracleLinux7"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"ipa-server-trust-ad", rpm:"ipa-server-trust-ad~4.2.0~15.0.1.el7_2.6.1", rls:"OracleLinux7"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"ldb-tools", rpm:"ldb-tools~1.1.25~1.el7_2", rls:"OracleLinux7"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libldb", rpm:"libldb~1.1.25~1.el7_2", rls:"OracleLinux7"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libldb-devel", rpm:"libldb-devel~1.1.25~1.el7_2", rls:"OracleLinux7"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libsmbclient", rpm:"libsmbclient~4.2.10~6.el7_2", rls:"OracleLinux7"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libsmbclient-devel", rpm:"libsmbclient-devel~4.2.10~6.el7_2", rls:"OracleLinux7"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libtalloc", rpm:"libtalloc~2.1.5~1.el7_2", rls:"OracleLinux7"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libtalloc-devel", rpm:"libtalloc-devel~2.1.5~1.el7_2", rls:"OracleLinux7"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libtdb", rpm:"libtdb~1.3.8~1.el7_2", rls:"OracleLinux7"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libtdb-devel", rpm:"libtdb-devel~1.3.8~1.el7_2", rls:"OracleLinux7"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libtevent", rpm:"libtevent~0.9.26~1.el7_2", rls:"OracleLinux7"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libtevent-devel", rpm:"libtevent-devel~0.9.26~1.el7_2", rls:"OracleLinux7"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libwbclient", rpm:"libwbclient~4.2.10~6.el7_2", rls:"OracleLinux7"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"libwbclient-devel", rpm:"libwbclient-devel~4.2.10~6.el7_2", rls:"OracleLinux7"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"openchange", rpm:"openchange~2.0~10.el7_2", rls:"OracleLinux7"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"openchange-client", rpm:"openchange-client~2.0~10.el7_2", rls:"OracleLinux7"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"openchange-devel", rpm:"openchange-devel~2.0~10.el7_2", rls:"OracleLinux7"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"openchange-devel-docs", rpm:"openchange-devel-docs~2.0~10.el7_2", rls:"OracleLinux7"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"pyldb", rpm:"pyldb~1.1.25~1.el7_2", rls:"OracleLinux7"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"pyldb-devel", rpm:"pyldb-devel~1.1.25~1.el7_2", rls:"OracleLinux7"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"pytalloc", rpm:"pytalloc~2.1.5~1.el7_2", rls:"OracleLinux7"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"pytalloc-devel", rpm:"pytalloc-devel~2.1.5~1.el7_2", rls:"OracleLinux7"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python-tdb", rpm:"python-tdb~1.3.8~1.el7_2", rls:"OracleLinux7"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"python-tevent", rpm:"python-tevent~0.9.26~1.el7_2", rls:"OracleLinux7"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"samba", rpm:"samba~4.2.10~6.el7_2", rls:"OracleLinux7"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"samba-client", rpm:"samba-client~4.2.10~6.el7_2", rls:"OracleLinux7"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"samba-client-libs", rpm:"samba-client-libs~4.2.10~6.el7_2", rls:"OracleLinux7"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"samba-common", rpm:"samba-common~4.2.10~6.el7_2", rls:"OracleLinux7"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"samba-common-libs", rpm:"samba-common-libs~4.2.10~6.el7_2", rls:"OracleLinux7"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"samba-common-tools", rpm:"samba-common-tools~4.2.10~6.el7_2", rls:"OracleLinux7"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"samba-dc", rpm:"samba-dc~4.2.10~6.el7_2", rls:"OracleLinux7"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"samba-dc-libs", rpm:"samba-dc-libs~4.2.10~6.el7_2", rls:"OracleLinux7"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"samba-devel", rpm:"samba-devel~4.2.10~6.el7_2", rls:"OracleLinux7"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"samba-libs", rpm:"samba-libs~4.2.10~6.el7_2", rls:"OracleLinux7"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"samba-pidl", rpm:"samba-pidl~4.2.10~6.el7_2", rls:"OracleLinux7"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"samba-python", rpm:"samba-python~4.2.10~6.el7_2", rls:"OracleLinux7"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"samba-test", rpm:"samba-test~4.2.10~6.el7_2", rls:"OracleLinux7"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"samba-test-devel", rpm:"samba-test-devel~4.2.10~6.el7_2", rls:"OracleLinux7"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"samba-test-libs", rpm:"samba-test-libs~4.2.10~6.el7_2", rls:"OracleLinux7"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"samba-vfs-glusterfs", rpm:"samba-vfs-glusterfs~4.2.10~6.el7_2", rls:"OracleLinux7"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"samba-winbind", rpm:"samba-winbind~4.2.10~6.el7_2", rls:"OracleLinux7"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"samba-winbind-clients", rpm:"samba-winbind-clients~4.2.10~6.el7_2", rls:"OracleLinux7"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"samba-winbind-krb5-locator", rpm:"samba-winbind-krb5-locator~4.2.10~6.el7_2", rls:"OracleLinux7"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"samba-winbind-modules", rpm:"samba-winbind-modules~4.2.10~6.el7_2", rls:"OracleLinux7"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"tdb-tools", rpm:"tdb-tools~1.3.8~1.el7_2", rls:"OracleLinux7"))) {
report += res;
}
if(report != "") {
security_message(data:report);
} else if(__pkg_match) {
exit(99);
}
exit(0);
}
exit(0);
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
23 Jan 2025 00:00Current
7.2High risk
Vulners AI Score7.2
CVSS 26.8
CVSS 37.4
CVSS 3.17.5
EPSS0.3693