CVE-2016-2125

It was found that Samba before versions 4.5.3, 4.4.8, 4.3.13 always requested forwardable tickets when using Kerberos authentication. A service to which Samba authenticated using Kerberos could subsequently use the ticket to impersonate Samba to other services or domain users...

CVE-2016-2125

It was found that Samba before versions 4.5.3, 4.4.8, 4.3.13 always requested forwardable tickets when using Kerberos authentication. A service to which Samba authenticated using Kerberos could subsequently use the ticket to impersonate Samba to other services or domain users...

CVE-2016-2125

It was found that Samba before versions 4.5.3, 4.4.8, 4.3.13 always requested forwardable tickets when using Kerberos authentication. A service to which Samba authenticated using Kerberos could subsequently use the ticket to impersonate Samba to other services or domain users...

CVE-2016-2125

CVE-2016-2125 affects Samba before 4.5.3, 4.4.8, and 4.3.13: Samba clients always request forwardable Kerberos tickets, allowing a service authenticated by Kerberos to impersonate Samba to other services or domain users. Connected advisories from Red Hat, CentOS, Debian, Fedora, and Alpine report...

RHEL 7 : samba (RHSA-2018:3056)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:3056 advisory. Samba is an open-source implementation of the Server Message Block SMB protocol and the related Common Internet File System CIFS protocol,...

MGASA-2018-0424 Updated samba packages fix security vulnerabilities

Updated samba packages fix security vulnerabilities: A malicious server could return a directory entry that could corrupt libsmbclient memory CVE-2018-10858. Missing access control checks allow discovery of confidential attribute values via authenticated LDAP search expressions CVE-2018-10919. Th...

Updated samba packages fix security vulnerabilities

Updated samba packages fix security vulnerabilities: A malicious server could return a directory entry that could corrupt libsmbclient memory CVE-2018-10858. Missing access control checks allow discovery of confidential attribute values via authenticated LDAP search expressions CVE-2018-10919. Th...

samba: Insufficient input validation in libsmbclient

A heap-buffer overflow was found in the way samba clients processed extra long filename in a directory listing. A malicious samba server could use this flaw to cause arbitrary code execution on a samba client...

Moderate: Red Hat Security Advisory: samba security, bug fix, and enhancement update

An update for samba is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

samba: Weak authentication protocol regression

A flaw was found in the way samba allowed the use of weak NTLMv1 authentication even when NTLMv1 was explicitly disabled. A man-in-the-middle attacker could use this flaw to read the credential and other details passed between the samba server and client...

samba: NULL pointer dereference in printer server process

A null pointer dereference flaw was found in Samba RPC external printer service. An attacker could use this flaw to cause the printer spooler service to crash...

Security Bulletin: A vulnerability in Samba affects IBM Spectrum Scale SMB protocol access method (CVE-2018-10858)

Summary A Samba vulnerability affects IBM Spectrum Scale SMB protocol access method to a heap-based buffer overflow, caused by improper bounds checking by libsmbclient. By sending an overly long filename, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause...

openSUSE: Security Advisory for samba (openSUSE-SU-2018:2400-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE SLES12 Security Update : samba (SUSE-SU-2018:2320-2)

This update for samba fixes the following issues : The following security vulnerability was fixed : CVE-2018-10858: smbcurlencode helper function is a subject to buffer overflow bsc1103411 The following other bugs were fixed: Fix libnsswins.so.2 link libreplace with rpath bsc1054849 Note that...

SUSE SLES12 Security Update : samba (SUSE-SU-2018:2339-2)

This update for samba fixes the following issues : The following security issues were fixed : CVE-2018-1050: Fixed denial of service vulnerability when SPOOLSS is run externally bsc1081741. CVE-2018-10858: smbcurlencode helper function is a subject to buffer overflow bsc1103411 Note that Tenable...

SUSE-SU-2018:2320-2 Security update for samba

This update for samba fixes the following issues: The following security vulnerability was fixed: - CVE-2018-10858: smbcurlencode helper function is a subject to buffer overflow bsc1103411 The following other bugs were fixed: - Fix libnsswins.so.2 link libreplace with rpath bsc1054849...

SUSE-SU-2018:2339-2 Security update for samba

This update for samba fixes the following issues: The following security issues were fixed: - CVE-2018-1050: Fixed denial of service vulnerability when SPOOLSS is run externally bsc1081741. - CVE-2018-10858: smbcurlencode helper function is a subject to buffer overflow bsc1103411...

Security update for samba (moderate)

Samba was updated to 4.6.15, bringing bug and security fixes. bsc1110943 Following security issues were fixed: - CVE-2018-10919: Fix unauthorized attribute access via searches. bsc1095057; Non-security bugs fixed: - Fix ctdbmutexcephradoshelper deadlock bsc1102230. - Allow idmaprid to have primar...

openSUSE: Security Advisory for samba (openSUSE-SU-2018:3211-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE Security Update : samba (openSUSE-2018-1195)

"Samba was updated to 4.6.15, bringing bug and security fixes. bsc1110943 Following security issues were fixed : - CVE-2018-10919: Fix unauthorized attribute access via searches. bsc1095057 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...