Samba Man-in-the-Middle Attack Vulnerability (CNVD-2016-02262)

Samba is a set of free software that enables the UNIX family of operating systems to connect to the SMB/CIFS network protocol of the Microsoft Windows operating system. Samba fails to validate SSL/TLS certificates, allowing remote attackers to exploit this vulnerability to spoof servers via a...

DSA-3548-2 samba - regression update

Bulletin has no description...

Samba DCE/RPC Protocol Security Downgrade Vulnerability

Samba is a set of free software that enables the UNIX family of operating systems to connect to the SMB/CIFS network protocol of the Microsoft Windows operating system. A security vulnerability in Samba's DCE/RPC protocol allows remote attackers to exploit this vulnerability to conduct denial of...

The vulnerability of the Samba file system allows a perpetrator to obtain confidential information or cause service interruptions.

The vulnerability of the internal DNS server of the Samba file system arises due to buffer overflow. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause a service failure reading beyond the memory limit or obtain confidential information by loading a specially...

Samba Badlock Critical Vulnerability

Samba is prone to badlock vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:samba:samba"; ifdescription...

CentOS Update for ipa-admintools CESA-2016:0612 centos7

Check the version of ipa-admintools SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882461";...

CentOS Update for libtevent CESA-2016:0612 centos6

Check the version of libtevent SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882464";...

CentOS Update for ldb-tools CESA-2016:0612 centos6

Check the version of ldb-tools SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882451";...

CentOS Update for ldb-tools CESA-2016:0612 centos7

Check the version of ldb-tools SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882459";...

CentOS Update for samba3x CESA-2016:0613 centos5

Check the version of samba3x SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882456";...

CentOS Update for libsmbclient CESA-2016:0611 centos6

Check the version of libsmbclient SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882457";...

openSUSE Security Update : samba (openSUSE-2016-453) (Badlock)

samba was updated to fix seven security issues. These security issues were fixed : - CVE-2015-5370: DCERPC server and client were vulnerable to DOS and MITM attacks bsc936862. - CVE-2016-2110: A man-in-the-middle could have downgraded NTLMSSP authentication bsc973031. - CVE-2016-2111: Domain...

Samba and Windows Vulnerabilities | Cloud Foundry

Samba and Windows Vulnerabilities Medium Vendor Samba, Microsoft Windows Versions Affected The following versions of Samba are affected: 3.6.x, 4.0.x, 4.1.x, 4.2.0-4.2.9, 4.3.0-4.3.6, and 4.4.0. The affected Microsoft Windows versions can be viewed here:...

[SECURITY] [DSA 3548-1] samba security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3548-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 13, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3548-1] samba security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3548-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 13, 2016 https://www.debian.org/security/faq -...

[SECURITY] Fedora 23 Update: samba-4.3.8-0.fc23

Samba is the standard Windows interoperability suite of programs for Linux and Unix...

SUSE-SU-2016:1028-1 Security update for samba

samba was updated to fix seven security issues. These security issues were fixed: - CVE-2015-5370: DCERPC server and client were vulnerable to DOS and MITM attacks bsc936862. - CVE-2016-2110: A man-in-the-middle could have downgraded NTLMSSP authentication bsc973031. - CVE-2016-2111: Domain...

Security update for samba (important)

samba was updated to fix seven security issues. These security issues were fixed: - CVE-2015-5370: DCERPC server and client were vulnerable to DOS and MITM attacks bsc936862. - CVE-2016-2110: A man-in-the-middle could have downgraded NTLMSSP authentication bsc973031. - CVE-2016-2111: Domain...

samba: crash in dcesrv_auth_bind_ack due to missing error check

Multiple flaws were found in Samba's DCE/RPC protocol implementation. A remote, authenticated attacker could use these flaws to cause a denial of service against the Samba server high CPU load or a crash or, possibly, execute arbitrary code with the permissions of the user running Samba root. Thi...

samba: Spoofing vulnerability when domain controller is configured

It was discovered that Samba configured as a Domain Controller would establish a secure communication channel with a machine using a spoofed computer name. A remote attacker able to observe network traffic could use this flaw to obtain session-related information about the spoofed machine...