11562 matches found
Debian DLA-562-1 : gosa security update
GOsa² is a combination of system-administrator and end-user web interface, designed to handle LDAP based setups. A code injection vulnerability in the Samba plugin code of GOsa has been discovered. During Samba password changes it has been possible to inject malicious Perl code. If you upgrade...
Scientific Linux Security Update : samba on SL7.x x86_64 (20160726)
Security Fixes : - A flaw was found in the way Samba initiated signed DCE/RPC connections. A man-in-the-middle attacker could use this flaw to downgrade the connection to not use signing and therefore impersonate the server. CVE-2016-2119 Bug Fixes : - Previously, the 'net' command in some cases...
[SECURITY] [DLA 562-1] gosa security update
Package : gosa Version : 2.7.4-4.3deb7u3 CVE ID : CVE-2015-8771 GOsa² is a combination of system-administrator and end-user web interface, designed to handle LDAP based setups. A code injection vulnerability in the Samba plugin code of GOsa has been discovered. During Samba password changes it ha...
samba: Client side SMB2/3 required signing can be downgraded
A flaw was found in the way Samba initiated signed DCE/RPC connections. A man-in-the-middle attacker could use this flaw to downgrade the connection to not use signing and therefore impersonate the server...
Moderate: Red Hat Security Advisory: samba security update
An update for samba is now available for Red Hat Gluster Storage 3.1 for RHEL 6 and Red Hat Gluster Storage 3.1 for RHEL 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severit...
ctdb, libsmbclient, libwbclient, samba security update
CentOS Errata and Security Advisory CESA-2016:1486 An update for samba is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...
Moderate: Red Hat Security Advisory: samba security and bug fix update
An update for samba is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...
samba: Client side SMB2/3 required signing can be downgraded
A flaw was found in the way Samba initiated signed DCE/RPC connections. A man-in-the-middle attacker could use this flaw to downgrade the connection to not use signing and therefore impersonate the server...
Moderate: Red Hat Security Advisory: samba4 security update
An update for samba4 is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...
samba: Client side SMB2/3 required signing can be downgraded
A flaw was found in the way Samba initiated signed DCE/RPC connections. A man-in-the-middle attacker could use this flaw to downgrade the connection to not use signing and therefore impersonate the server...
samba security and bug fix update
4.2.10-7 - resolves: 1351960 - Fix CVE-2016-2119 4.2.10-6.3 - resolves: 1350759 - Fix idmaphash when used with other modules - resolves: 1351260 - Fix krb5 encryption type setup during join...
DLA-562-1 gosa - security update
Bulletin has no description...
Samba 4.x < 4.2.14 / 4.3.x < 4.3.11 / 4.4.x < 4.4.5 SMB2/3 Client Connection Required Signing Downgrade
The version of Samba running on the remote host is 4.x prior to 4.2.14, 4.3.x prior to 4.3.11, or 4.4.x prior to 4.4.5. It is, therefore, affected by a flaw in libcli/smb/smbXclibase.c that is triggered when handling SMB2 and SMB3 client connections. A man-in-the-middle attacker can exploit this,...
openSUSE Security Update : samba (openSUSE-2016-881)
"This update for samba fixes the following issues : - Prevent client-side SMB2 signing downgrade; CVE-2016-2119; bso11860 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2016-881. The...
The vulnerability of the Samba file system allows a hacker to replace the SMB2 and SMB3 protocols on servers.
The vulnerability in the function of the libcli/smb/smbXclibase.c file system of the Samba file system is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to replace the SMB2 and SMB3 protocols on the server by using the flags...
Fedora 23 : 2:samba (2016-48b53757a9)
Security fix for CVE-2016-2119 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300...
[SECURITY] Fedora 23 Update: samba-4.3.11-1.fc23
Samba is the standard Windows interoperability suite of programs for Linux and Unix...
Fedora 24 : 2:samba (2016-0acec022f4)
Security fix for CVE-2016-2119 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300...
FreeBSD : samba -- client side SMB2/3 required signing can be downgraded (4729c849-4897-11e6-b704-000c292e4fd8)
Samba team reports : A man in the middle attack can disable client signing over SMB2/3, even if enforced by configuration parameters. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database :...