293 matches found
MGASA-2016-0094 Updated samba packages fix security vulnerabilities
Updated ldb and samba packages fix security vulnerabilities: A malicious client can send packets that cause the LDAP server in the samba daemon process to become unresponsive, preventing the server from servicing any other requests CVE-2015-3223. Versions of Samba from 3.0.0 to 4.3.2 inclusive ar...
SUSE-SU-2016:0164-1 Security update for samba
This update for Samba fixes the following security issues: - CVE-2015-5330: Remote read memory exploit in LDB bnc958586 - CVE-2015-5252: Insufficient symlink verification file access outside the share bnc958582 - CVE-2015-5296: No man in the middle protection when forcing smb encryption on the...
RHEL 7 : Storage Server (RHSA-2016:0016)
Updated samba packages that fix multiple security issues are now available for Red Hat Gluster Storage 3.1 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...
SUSE-SU-2016:0032-1 Security update for samba
This update for Samba fixes the following security issues: - CVE-2015-5330: Remote read memory exploit in LDB bnc958586. - CVE-2015-5252: Insufficient symlink verification file access outside the share bnc958582. - CVE-2015-5296: No man in the middle protection when forcing smb encryption on the...
CVE-2015-7540
The LDAP server in the AD domain controller in Samba 4.x before 4.1.22 does not check return values to ensure successful ASN.1 memory allocation, which allows remote attackers to cause a denial of service memory consumption and daemon crash via crafted packets...
SUSE: Security Advisory for ldb (SUSE-SU-2015:2304-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE-SU-2015:2304-1 Security update for ldb, samba, talloc, tdb, tevent
This update for ldb, samba, talloc, tdb, tevent fixes the following security issues: - ldb was updated to version 1.1.24. + Fix ldap \00 search expression attack dos; CVE-2015-3223; bso11325 + Fix remote read memory exploit in ldb; CVE-2015-5330; bso11599 + Move ldbunpackdata into ldbmodule.h for...
CVE-2007-2444
Logic error in the SID/Name translation functionality in smbd in Samba 3.0.23d through 3.0.25pre2 allows local users to gain temporary privileges and execute SMB/CIFS protocol operations via unspecified vectors that cause the daemon to transition to the root user...
SUSE-SU-2015:0353-1 Security update for samba
samba was updated to fix one security issue. This security issue was fixed: - CVE-2015-0240: Don't call tallocfree on an uninitialized pointer bnc917376. These non-security issues were fixed: - Fix vfssnapper DBus string handling bso11055, bnc913238. - Fix libsmbclient DFS referral handling. +...
SUSE-SU-2015:0371-1 Security update for Samba
Samba has been updated to fix one security issue: CVE-2015-0240: Don't call tallocfree on an uninitialized pointer bnc917376. Additionally, these non-security issues have been fixed: Realign the winbind request structure following requiremembershipof field expansion bnc913001. Reuse connections...
openSUSE Security Update : samba (openSUSE-SU-2013:1339-1)
"This update of samba fixed the following issues : - The pamwinbind requiremembershipof option allows for a list of SID, but currently only provides buffer space for 20; bnc806501. - Samba 3.0.x to 4.0.7 are affected by a denial of service attack on authenticated or guest connections;...
MGASA-2014-0138 Updated samba packages fix security vulnerability
In Samba before 3.6.23, the SAMR server neglects to ensure that attempted password changes will update the bad password count, and does not set the lockout flags. This would allow a user unlimited attempts against the password by simply calling ChangePasswordUser2 repeatedly. This is available...
[slackware-security] samba (SSA:2014-072-01)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 slackware-security samba SSA:2014-072-01 New samba packages are available for Slackware 14.0, 14.1, and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: +--------------------------+...
Scientific Linux Security Update : samba on SL5.x i386/x86_64 (20140317)
It was discovered that the Samba Web Administration Tool SWAT did not protect against being opened in a web page frame. A remote attacker could possibly use this flaw to conduct a clickjacking attack against SWAT users or users with an active SWAT session. CVE-2013-0213 A flaw was found in the...
SUSE-SU-2015:0386-1 Security update for Samba
This update fixes the following security issues with Samba: bnc844720: DCERPC fraglen not checked CVE-2013-4408 bnc853347: winbind pam security problem CVE-2012-6150 bnc848101: No access check verification on stream files CVE-2013-4475 And fixes the following non-security issues: bnc853021:...
Oracle Linux 4 : samba (ELSA-2012-0478)
Description of changes: 3.0.33-3.36.el4 - Security Release, fixes CVE-2012-1182 - resolves: 812010 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Oracle Linux Security Advisory ELSA-2012-0478...
Slackware: Security Advisory (SSA:2006-195-01)
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CentOS Update for libsmbclient CESA-2012:0533 centos6
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Critical: Red Hat Security Advisory: samba security update
Updated samba packages that fix one security issue are now available for Red Hat Enterprise Linux 5 and 6; Red Hat Enterprise Linux 5.3 Long Life; and Red Hat Enterprise Linux 5.6, 6.0 and 6.1 Extended Update Support. The Red Hat Security Response Team has rated this update as having critical...