CVE-2014-3560

NetBIOS name services daemon nmbd in Samba 4.0.x before 4.0.21 and 4.1.x before 4.1.11 allows remote attackers to execute arbitrary code via unspecified vectors that modify heap memory, involving a sizeof operation on an incorrect variable in the unstrcpy macro in stringwrappers.h...

CVE-2014-3560

CVE-2014-3560 affects Samba’s NetBIOS name service daemon (nmbd). The issue lies in a heap-memory corruption caused by a sizeof operation on an incorrect variable in the unstrcpy macro in string_wrappers.h, impacting Samba 4.0.x before 4.0.21 and 4.1.x before 4.1.11. This enables remote code exec...

RedHat Update for samba4 RHSA-2014:1009-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 7 : samba (ELSA-2014-1008)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2014-1008 advisory. - resolves: 1126013 - CVE-2014-3560: remote code execution in nmbd. Tenable has extracted the preceding description block directly from the Oracle Linux securit...

Oracle Linux 6 : samba4 (ELSA-2014-1009)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2014-1009 advisory. - resolves: 1126011 - CVE-2014-3560: remote code execution in nmbd. - resolves: 1105501 - CVE-2014-0244: DoS in nmbd. - resolves: 1108842 - CVE-2014-3493: DoS i...

RHEL 6 : samba4 (RHSA-2014:1009)

Updated samba4 packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

RHEL 7 : samba (RHSA-2014:1008)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2014:1008 advisory. Samba is an open-source implementation of the Server Message Block SMB or Common Internet File System CIFS protocol, which allows PC-compatible...

Security fix for the ALT Linux 8 package samba-DC version 4.1.11-alt1

Aug. 5, 2014 Alexey Shabalin 4.1.11-alt1 - 4.1.11 - fixed unstrcpy macro length is invalidCVE-2014-3560...

Security fix for the ALT Linux 10 package samba version 4.1.11-alt1

Aug. 5, 2014 Alexey Shabalin 4.1.11-alt1 - 4.1.11 - fixed unstrcpy macro length is invalidCVE-2014-3560...

[USN-2305-1] Samba vulnerability

========================================================================== Ubuntu Security Notice USN-2305-1 August 01, 2014 samba vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubun...

FreeBSD : samba -- remote code execution (89ff45e3-1a57-11e4-bebd-000c2980a9f3)

Samba developers report : A malicious browser can send packets that may overwrite the heap of the target nmbd NetBIOS name services daemon. It may be possible to use this to generate a remote code execution vulnerability as the superuser root. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

[slackware-security] samba

New samba packages are available for Slackware 14.1 and -current to fix a security issue. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/samba-4.1.11-i486-1slack14.1.txz: Upgraded. This update fixes a remote code execution attack on unauthenticated nmbd NetBIOS name...

Samba 4.x < 4.0.21 / 4.1.11 nmbd Remote Code Execution

According to its banner, the version of Samba on the remote host is 4.x prior to 4.0.21 / 4.1.11. It is, therefore, affected by a flaw in the NetBIOS name services daemon nmbd. This flaw may allow an attacker to execute arbitrary code as the superuser. Note that Nessus has not tested for this iss...

openSUSE Security Update : java-1_6_0-openjdk (java-1_6_0-openjdk-5329) (BEAST)

Oracle/Sun OpenJDK 1.6.0 was updated to the 1.10.4release, fixing lots of bugs and security issues. Please see http://www.oracle.com/technetwork/topics/security/javacpuoct2011-44343 1.html for more details. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package chec...

openSUSE Security Update : java-1_6_0-openjdk (java-1_6_0-openjdk-5329) (BEAST)

Oracle/Sun OpenJDK 1.6.0 was updated to the 1.10.4release, fixing lots of bugs and security issues. Please see http://www.oracle.com/technetwork/topics/security/javacpuoct2011-44343 1.html for more details. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package chec...

openSUSE Security Update : kdenetwork4 (openSUSE-SU-2010:1076-1)

This update of kdenetwork fixes several bugs, the security related issues are : - CVE-2010-1000: CVSS v2 Base Score: 4.3 AV:N/AC:M/Au:N/C:N/I:P/A:N: CWE-22 The 'name' attribute of the 'file' element of metalink files is not properly sanitised this can be exploited to download files to arbitrary...

openSUSE Security Update : java-1_6_0-sun (openSUSE-SU-2010:0754-1)

Sun Java 1.6.0 was updated to Security Update U22. The release notes for this release are on: http://www.oracle.com/technetwork/java/javase/6u22releasenotes-176121. html Security advisory page for this update: http://www.oracle.com/technetwork/topics/security/javacpuoct2010-17625 8.html Following...

openSUSE Security Update : java-1_6_0-sun (java-1_6_0-sun-5320) (BEAST)

Oracle/Sun Java 1.6.0 was updated to the u26 release, fixing lots of bugs and security issues. Please see http://www.oracle.com/technetwork/topics/security/javacpuoct2011-44343 1.html for more details. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

openSUSE Security Update : wireshark (openSUSE-SU-2013:1084-1)

This update of wireshark includes several security and bug fixes. - update to 1.8.8 bnc823932 + vulnerabilities fixed : - The CAPWAP dissector could crash. wnpa-sec-2013-32 - The GMR-1 BCCH dissector could crash. wnpa-sec-2013-33 - The PPP dissector could crash. wnpa-sec-2013-34 - The NBAP...

Fedora Update for wireshark FEDORA-2013-17661

Check for the Version of wireshark OpenVAS Vulnerability Test Fedora Update for wireshark FEDORA-2013-17661 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...