samba - security update

2015-02-2300:00:00

Google

osv.dev

0.974 High

EPSS

Percentile

99.9%

JSON

Richard van Eeden of Microsoft Vulnerability Research discovered that
Samba, a SMB/CIFS file, print, and login server for Unix, contains a
flaw in the netlogon server code which allows remote code execution with
root privileges from an unauthenticated connection.

For the oldstable distribution (squeeze), this problem has been fixed in
version 2:3.5.6~dfsg-3squeeze12.

For the stable distribution (wheezy), this problem has been fixed in
version 2:3.6.6-6+deb7u5.

We recommend that you upgrade your samba packages.

CPENameOperatorVersion
sambaeq2:3.5.6~dfsg-3squeeze2
sambaeq2:3.5.6~dfsg-3squeeze9
sambaeq2:3.5.6~dfsg-3squeeze8
sambaeq2:3.5.6~dfsg-3
sambaeq2:3.5.6~dfsg-3squeeze4
sambaeq2:3.5.6~dfsg-3squeeze3
sambaeq2:3.5.6~dfsg-3squeeze11
sambaeq2:3.5.6~dfsg-3squeeze7
sambaeq2:3.5.6~dfsg-3squeeze5
sambaeq2:3.5.6~dfsg-3squeeze1

Name	Operator	Version
samba	eq	2:3.5.6~dfsg-3squeeze2
samba	eq	2:3.5.6~dfsg-3squeeze9
samba	eq	2:3.5.6~dfsg-3squeeze8
samba	eq	2:3.5.6~dfsg-3
samba	eq	2:3.5.6~dfsg-3squeeze4
samba	eq	2:3.5.6~dfsg-3squeeze3
samba	eq	2:3.5.6~dfsg-3squeeze11
samba	eq	2:3.5.6~dfsg-3squeeze7
samba	eq	2:3.5.6~dfsg-3squeeze5
samba	eq	2:3.5.6~dfsg-3squeeze1