libsmbclient, samba security update

CentOS Errata and Security Advisory CESA-2014:0305 Updated samba packages that fix three security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base...

Moderate: Red Hat Security Advisory: samba security update

Updated samba packages that fix three security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

samba: cross-site request forgery vulnerability in SWAT

Cross-site request forgery CSRF vulnerability in the Samba Web Administration Tool SWAT in Samba 3.x before 3.5.21, 3.6.x before 3.6.12, and 4.x before 4.0.2 allows remote attackers to hijack the authentication of arbitrary users by leveraging knowledge of a password and composing requests that...

samba: DoS via integer overflow when reading an EA list

Integer overflow in the readnttransealist function in nttrans.c in smbd in Samba 3.x before 3.5.22, 3.6.x before 3.6.17, and 4.x before 4.0.8 allows remote attackers to cause a denial of service memory consumption via a malformed packet...

samba: clickjacking vulnerability in SWAT

The Samba Web Administration Tool SWAT in Samba 3.x before 3.5.21, 3.6.x before 3.6.12, and 4.x before 4.0.2 allows remote attackers to conduct clickjacking attacks via a 1 FRAME or 2 IFRAME element...

Fedora Update for samba FEDORA-2014-3796

Check for the Version of samba OpenVAS Vulnerability Test Fedora Update for samba FEDORA-2014-3796 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

Security fix for the ALT Linux 10 package samba version 4.1.6-alt1

March 17, 2014 Alexey Shabalin 4.1.6-alt1 - 4.1.6 - fixed CVE-2013-4496, CVE-2013-6442...

Samba 'smbcacls'命令安全绕过漏洞

Bugtraq ID:66232 CVE ID:CVE-2013-6442 Samba是一款实现SMB协议、跨平台进行文件共享和打印共享服务的程序。 当使用"-C|--chown name"或"-G|--chgrp name"选项时Samba的smbcacls工具存在错误，允许攻击者利用漏洞绕过安全限制访问受限资源。 0 Samba 4.x Samba 4.0.16或4.1.6已经修复该漏洞，建议用户下载更新： http://www.samba.org/...

Fedora 20 : samba-4.1.6-1.fc20 (2014-3796)

Fix CVE-2013-4496 and CVE-2013-6442. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 703...

samba security update

3.0.33-3.40.el5 - Security Release, fixes CVE-2013-0213 and CVE-2013-4124 - resolves: 1073350...

Security fix for the ALT Linux 8 package samba version 4.1.6-alt1

March 17, 2014 Alexey Shabalin 4.1.6-alt1 - 4.1.6 - fixed CVE-2013-4496, CVE-2013-6442...

Security fix for the ALT Linux 8 package samba-DC version 4.1.6-alt1

March 17, 2014 Alexey Shabalin 4.1.6-alt1 - 4.1.6 - fixed CVE-2013-4496, CVE-2013-6442...

Slackware 14.0 / 14.1 / current : samba (SSA:2014-072-01)

New samba packages are available for Slackware 14.0, 14.1, and -current to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2014-072-01. The text itself is copyright C...

Fedora Update for samba FEDORA-2014-3796

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 20 Update: samba-4.1.6-1.fc20

Samba is the standard Windows interoperability suite of programs for Linux and Unix...

CVE-2013-6442

The ownerset function in smbcacls.c in smbcacls in Samba 4.0.x before 4.0.16 and 4.1.x before 4.1.6 removes an ACL during use of a --chown or --chgrp option, which allows remote attackers to bypass intended access restrictions in opportunistic circumstances by leveraging an unintended...

CVE-2013-4496

Samba 3.x before 3.6.23, 4.0.x before 4.0.16, and 4.1.x before 4.1.6 does not enforce the password-guessing protection mechanism for all interfaces, which makes it easier for remote attackers to obtain access via brute-force ChangePasswordUser2 1 SAMR or 2 RAP attempts...

DEBIAN-CVE-2013-6442

The ownerset function in smbcacls.c in smbcacls in Samba 4.0.x before 4.0.16 and 4.1.x before 4.1.6 removes an ACL during use of a --chown or --chgrp option, which allows remote attackers to bypass intended access restrictions in opportunistic circumstances by leveraging an unintended...

CVE-2013-6442

The ownerset function in smbcacls.c in smbcacls in Samba 4.0.x before 4.0.16 and 4.1.x before 4.1.6 removes an ACL during use of a --chown or --chgrp option, which allows remote attackers to bypass intended access restrictions in opportunistic circumstances by leveraging an unintended...

DEBIAN-CVE-2013-4496

Samba 3.x before 3.6.23, 4.0.x before 4.0.16, and 4.1.x before 4.1.6 does not enforce the password-guessing protection mechanism for all interfaces, which makes it easier for remote attackers to obtain access via brute-force ChangePasswordUser2 1 SAMR or 2 RAP attempts...