openSUSE Security Update : samba (openSUSE-2012-109)

" - Fix memory leak in parent smbd on connection; CVE-2012-0817; bso8724 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-109. The text description of this plugin is C SUSE LLC...

openSUSE Security Update : ldapsmb (openSUSE-SU-2011:0998-1)

A Cross-Site Request Forgery CSRF and a Cross Site Scripting vulnerability have been fixed in samba's SWAT. CVE-2011-2522 and CVE-2011-2694 have been assigned. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...

openSUSE Security Update : samba (openSUSE-SU-2012:0507-1)

" - Add the ldapsmb sources as else patches against them have no chance to apply. - Samba pre-3.6.4 are affected by a vulnerability that allows remote code exe- cution as the 'root' user; PIDL based autogenerated code allows overwriting beyond of allocated array; CVE-2012-1182; bso8815...

openSUSE Security Update : samba (openSUSE-SU-2013:1921-1)

" - Update to 4.1.3. + DCE-RPC fragment length field is incorrectly checked; CVE-2013-4408; bnc844720. + pamwinbind login without requiremembershipof restrictions; CVE-2012-6150; bnc853347. - Make use of the full gpg pub key file name including the key ID. - Add transparent file compression...

Samba < 3.6.20 / 4.0.11 / 4.1.1 Multiple Vulnerabilities

Binary data 8288.prm...

Samba 4.0.x < 4.0.18 / 4.1.x < 4.1.8 Multiple Vulnerabilities

Binary data 3540.prm...

Security fix for the ALT Linux 8 package samba version 4.1.8-alt1

June 4, 2014 Alexey Shabalin 4.1.8-alt1 - 4.1.8 - fixed CVE-2014-0239, CVE-2014-0178...

Security fix for the ALT Linux 8 package samba-DC version 4.1.8-alt1

June 4, 2014 Alexey Shabalin 4.1.8-alt1 - 4.1.8 - fixed CVE-2014-0239, CVE-2014-0178...

Security fix for the ALT Linux 10 package samba version 4.1.8-alt1

June 4, 2014 Alexey Shabalin 4.1.8-alt1 - 4.1.8 - fixed CVE-2014-0239, CVE-2014-0178...

Potential DOS in Samba internal DNS server

Description Samba versions 4.0.0 and above have a flaw in DNS protocol handling in the internal DNS server. The server will not check the "reply" flag in the DNS packet header when processing a request. That makes it vulnerable to reply to a spoofed reply packet with another reply. Two affected...

Samba < 3.6.23 / 4.0.16 / 4.1.6 Multiple Vulnerabilities

Binary data 8276.prm...

Uninitialized memory exposure.

Description In preparing a response to an authenticated FSCTLGETSHADOWCOPYDATA or FSCTLSRVENUMERATESNAPSHOTS client request, affected versions of Samba do not initialize 8 bytes of the 16 byte SRVSNAPSHOTARRAY response field. The uninitialized buffer is sent back to the client. A non-default VFS...

Samba 3.5.x / 3.6.x < 3.6.25 / 4.1.x < 4.1.8 Multiple Vulnerabilities

According to its banner, the version of Samba running on the remote host is 3.5.x or 3.6.x prior to 3.6.25 / 4.1.x prior to 4.1.8. It is, therefore, potentially affected by the following vulnerabilities : - An error exists related to GETSHADOWCOPYDATA and FSCTLSRVENUMERATESNAPSHOTS request handli...

[SECURITY] Fedora 20 Update: smb4k-1.1.2-1.fc20

Smb4K is an SMB/CIFS share browser for KDE. It uses the Samba software suit e to access the SMB/CIFS shares of the local network neighborhood. Its purpose i s to provide a program that's easy to use and has as many features as possible...

[SECURITY] Fedora 19 Update: smb4k-1.1.2-1.fc19

Smb4K is an SMB/CIFS share browser for KDE. It uses the Samba software suit e to access the SMB/CIFS shares of the local network neighborhood. Its purpose i s to provide a program that's easy to use and has as many features as possible...

Samba 4.x < 4.0.18 Multiple Vulnerabilities

According to its banner, the version of Samba running on the remote host is 4.x prior to 4.0.18 and is, therefore, potentially affected by the following vulnerabilities : - An error exists related to 'GETSHADOWCOPYDATA' or 'FSCTLSRVENUMERATESNAPSHOTS' request handling and 'vfs objects' parameter...

CVE-2014-0239

The internal DNS server in Samba 4.x before 4.0.18 does not check the QR field in the header section of an incoming DNS message before sending a response, which allows remote attackers to cause a denial of service CPU and bandwidth consumption via a forged response packet that triggers a...

DEBIAN-CVE-2014-0239

The internal DNS server in Samba 4.x before 4.0.18 does not check the QR field in the header section of an incoming DNS message before sending a response, which allows remote attackers to cause a denial of service CPU and bandwidth consumption via a forged response packet that triggers a...

CVE-2014-0178

Samba 3.6.6 through 3.6.23, 4.0.x before 4.0.18, and 4.1.x before 4.1.8, when a certain vfs shadow copy configuration is enabled, does not properly initialize the SRVSNAPSHOTARRAY response field, which allows remote authenticated users to obtain potentially sensitive information from process memo...

DEBIAN-CVE-2014-0178

Samba 3.6.6 through 3.6.23, 4.0.x before 4.0.18, and 4.1.x before 4.1.8, when a certain vfs shadow copy configuration is enabled, does not properly initialize the SRVSNAPSHOTARRAY response field, which allows remote authenticated users to obtain potentially sensitive information from process memo...