libsmbclient, samba, samba3x security update

CentOS Errata and Security Advisory CESA-2013:1806 Updated samba3x and samba packages that fix two security issues are now available for Red Hat Enterprise Linux 5 and 6 respectively. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerabilit...

RHEL 6 : samba4 (RHSA-2013:1805)

Updated samba4 packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Debian DSA-2812-1 : samba - several vulnerabilities

Two security issues were found in Samba, a SMB/CIFS file, print, and login server : - CVE-2013-4408 It was discovered that multiple buffer overflows in the processing of DCE-RPC packets may lead to the execution of arbitrary code. - CVE-2013-4475 Hemanth Thummala discovered that ACLs were not...

FreeBSD : samba -- multiple vulnerabilities (613e45d1-6154-11e3-9b62-000c292e4fd8)

The Samba project reports : These are security releases in order to address CVE-2013-4408 DCE-RPC fragment length field is incorrectly checked and CVE-2012-6150 pamwinbind login without requiremembershipof restrictions. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

RHEL 6 : samba and samba3x (RHSA-2013:1806)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2013:1806 advisory. Samba is an open-source implementation of the Server Message Block SMB or Common Internet File System CIFS protocol, which allows...

Oracle Linux 6 : samba4 (ELSA-2013-1805)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-1805 advisory. - resolves: 1018039 - Fix CVE-2013-4408. Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessu...

[SECURITY] [DSA 2812-1] samba security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2812-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff December 09, 2013 http://www.debian.org/security/faq -...

samba4 security update

4.0.0-60.rc4 - resolves: 1018039 - Fix CVE-2013-4408. 4.0.0-59.rc4 - Fix usage of client min/max protocol options in winbindd - related: 949993...

CVE-2013-4408

Heap-based buffer overflow in the dcerpcreadncacnpacketdone function in librpc/rpc/dcerpcutil.c in winbindd in Samba 3.x before 3.6.22, 4.0.x before 4.0.13, and 4.1.x before 4.1.3 allows remote AD domain controllers to execute arbitrary code via an invalid fragment length in a DCE-RPC packet...

samba and samba3x security update

3.6.9-167 - resolves: 1018037 - Fix CVE-2013-4408. 3.6.9-165 - resolves: 1028086 - Fix CVE-2013-4475...

Security fix for the ALT Linux 8 package samba-DC version 4.1.3-alt1

Dec. 9, 2013 Alexey Shabalin 4.1.3-alt1 - 4.1.3 - fixed CVE-2013-4408, CVE-2012-6150...

Fedora Update for moodle FEDORA-2012-14295

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for moodle FEDORA-2012-14295

Check for the Version of moodle OpenVAS Vulnerability Test Fedora Update for moodle FEDORA-2012-14295 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Fedora 16 : moodle-2.1.8-1.fc16 (2012-14295)

Multiple vulnerabilities. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenabl...

CVE-2012-4408

CVE-2012-4408 affects Moodle: 2.1.x before 2.1.8, 2.2.x before 2.2.5, and 2.3.x before 2.3.2. The issue arises because course/reset.php validates an update capability instead of a reset capability, allowing remote authenticated users to bypass intended access restrictions via a reset operation. I...

CVE-2011-4408

CVE-2011-4408 affects the Ubuntu Single Sign On Client (ubuntu-sso-client) on Ubuntu 11.04 and 11.10. The issue is that SSL certificates were not properly validated over HTTPS, enabling remote attackers to perform MITM attacks to spoof a server and read or modify sensitive data. Public references...

CVE-2010-4408

CVE-2010-4408 affects Apache Archiva 1.0–1.3.1. The issue is a cross-site request forgery (CSRF) vulnerability that, due to not requiring the administrator’s password when modifying a user account, could allow context-dependent attackers to gain privileges (e.g., via an unattended workstation or ...

CVE-2009-4408

Multiple cross-site scripting XSS vulnerabilities in models.parser in PyForum 1.0.3 and possibly earlier versions, and possibly zForum, allow remote attackers to inject arbitrary web script or HTML via crafted BBcode 1 img or 2 url tags, which are not properly handled when a post is viewed...

Fedora Update for mediawiki FEDORA-2008-8639

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for mediawiki FEDORA-2008-8678

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...