Security fix for the ALT Linux 8 package samba version 4.6.14-alt1.1

March 15, 2018 Evgeny Sinelnikov 4.6.14-alt1.1 - Rebuild security release Fixes: CVE-2018-1050, CVE-2018-1057 with old ceph version without libceph-common for c7/c8...

Security fix for the ALT Linux 10 package samba version 4.6.14-alt1.S1.1

March 15, 2018 Evgeny Sinelnikov 4.6.14-alt1.S1.1 - Rebuild security release Fixes: CVE-2018-1050, CVE-2018-1057 with old ceph version without libceph-common for c7/c8...

Fedora Update for samba FEDORA-2018-c5c651ac44

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Samba 4.x Multiple Vulnerabilities (CVE-2018-1050, CVE-2018-1057)

Samba is prone to multiple vulnerabilities. Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Slackware 14.0 / 14.1 / 14.2 / current : samba (SSA:2018-072-02)

New samba packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security a issue. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2018-072-02. The text itself is copyright C Slackware Linu...

FreeBSD : samba -- multiple vulnerabilities (fb26f78a-26a9-11e8-a1c2-00505689d4ae)

The samba project reports : Missing NULL pointer checks may crash the external print server process. On a Samba 4 AD DC any authenticated user can change other user's passwords over LDAP, including the passwords of administrative users and service accounts. C Tenable Network Security, Inc. The...

Ubuntu: Security Advisory (USN-3595-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2018-1057

CVE-2018-1057 affects Samba in AD DC setups where the LDAP server incorrectly validates permissions to modify passwords, enabling authenticated users to change other users’ passwords (including admin/privileged accounts). Affected: Samba 4 AD DC; impact is password modification rights over LDAP. ...

CVE-2018-1057

On a Samba 4 AD DC the LDAP server in all versions of Samba from 4.0.0 onwards incorrectly validates permissions to modify passwords over LDAP allowing authenticated users to change any other users' passwords, including administrative users and privileged service accounts eg Domain Controllers...

[SECURITY] [DSA 4135-1] samba security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4135-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 13, 2018 https://www.debian.org/security/faq -...

Samba Releases Security Updates

The Samba Team has released security updates to address several vulnerabilities in Samba. An attacker could exploit one of these vulnerabilities to take control of an affected system. NCCIC/US-CERT encourages users and administrators to review the Samba Security Announcements for CVE-2018-1050 an...

[ASA-201803-10] samba: multiple issues

Arch Linux Security Advisory ASA-201803-10 ========================================== Severity: Critical Date : 2018-03-13 CVE-ID : CVE-2018-1050 CVE-2018-1057 Package : samba Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-651 Summary ======= The package samba befor...

Security fix for the ALT Linux 8 package samba version 4.6.14-alt1

March 12, 2018 Evgeny Sinelnikov 4.6.14-alt1 - Update to spring security release - Security fixes: + CVE-2018-1050 Codenomicon crashes in spoolss server code + CVE-2018-1057 Unprivileged user can change any user and admin password...

Security fix for the ALT Linux 10 package samba version 4.6.14-alt1.S1

March 12, 2018 Evgeny Sinelnikov 4.6.14-alt1.S1 - Update to spring security release - Security fixes: + CVE-2018-1050 Codenomicon crashes in spoolss server code + CVE-2018-1057 Unprivileged user can change any user and admin password...

CVE-2016-1075

Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different...

CVE-2016-1065

Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different...

CVE-2016-1057

CVE-2016-1057 is described in the initial entry as a use-after-free vulnerability in Adobe Reader/Acrobat products with unspecified vectors. A connected document (Exploit for CVE-2016-1057) claims a PoC exploit for MikroTik RouterOS v6.x that uses a ROP chain for remote code execution, implying a...

CVE-2015-1057

The vulnerability CVE-2015-1057 is an XSS issue in e107 2.0.0, affecting usersettings.php. The flaw allows remote attackers to inject arbitrary web script or HTML via the Real Name field, enabling possible script execution in the user’s context. The connected sources confirm the affected product/...

CVE-2015-1057

creationtimestamp| type| source ---|---|--- 2015-01-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/35679...

CVE-2013-1057

CVE-2013-1057 is an untrusted search path vulnerability in MAAS prior to 13.10, affecting the maas-import-pxe-files component. The flaw allows a local user to execute arbitrary code by placing a Trojan horse import_pxe_files configuration file in the current working directory, exploiting the prog...