Scientific Linux Security Update : samba on SL4.x i386/x86_64 (20120223)

Samba is a suite of programs used by machines to share files, printers, and other information. An input validation flaw was found in the way Samba handled Any Batched AndX requests. A remote, unauthenticated attacker could send a specially crafted SMB packet to the Samba server, possibly resultin...

Scientific Linux Security Update : samba on SL5.x, SL4.x, SL3.x i386/x86_64

Various bugs were found in NDR parsing, used to decode MS-RPC requests in Samba. A remote attacker could have sent carefully crafted requests causing a heap overflow, which may have led to the ability to execute arbitrary code on the server. CVE-2007-2446 Unescaped user input parameters were bein...

Scientific Linux Security Update : kernel on SL5.x i386/x86_64

Security fixes : - a missing capability check was found in the Linux kernel dochangetype routine. This could allow a local unprivileged user to gain privileged access or cause a denial of service. CVE-2008-2931, Important - a flaw was found in the Linux kernel Direct-IO implementation. This could...

Scientific Linux Security Update : samba on SL5.x, SL6.x i386/x86_64 (20120410)

Samba is an open source implementation of the Server Message Block SMB or Common Internet File System CIFS protocol, which allows PC-compatible machines to share files, printers, and other information. A flaw in the Samba suite's Perl-based DCE/RPC IDL PIDL compiler, used to generate code to hand...

Scientific Linux Security Update : samba on SL4.x, SL5.x i386/x86_64

Samba is a suite of programs used by machines to share files, printers, and other information. A cross-site scripting XSS flaw was found in the password change page of the Samba Web Administration Tool SWAT. If a remote attacker could trick a user, who was logged into the SWAT interface, into...

Scientific Linux Security Update : samba on SL3.x, SL4.x, SL5.x i386/x86_64

A denial of service flaw was found in the Samba smbd daemon. An authenticated, remote user could send a specially crafted response that would cause an smbd child process to enter an infinite loop. An authenticated, remote user could use this flaw to exhaust system resources by opening multiple CI...

Scientific Linux Security Update : samba and samba3x on SL5.x, SL6.x i386/x86_64 (20120430)

Samba is an open source implementation of the Server Message Block SMB or Common Internet File System CIFS protocol, which allows PC-compatible machines to share files, printers, and other information. A flaw was found in the way Samba handled certain Local Security Authority LSA Remote Procedure...

Scientific Linux Security Update : samba on SL5.x, SL4.x, SL3.x i386/x86_64

A stack-based buffer overflow flaw was found in the way Samba authenticates remote users. A remote unauthenticated user could trigger this flaw to cause the Samba server to crash, or execute arbitrary code with the permissions of the Samba server. CVE-2007-6015 This update also fixes a regression...

Scientific Linux Security Update : samba on SL5.x i386/x86_64 (20120223)

Samba is a suite of programs used by machines to share files, printers, and other information. An input validation flaw was found in the way Samba handled Any Batched AndX requests. A remote, unauthenticated attacker could send a specially crafted SMB packet to the Samba server, possibly resultin...

Scientific Linux Security Update : samba on SL6.x i386/x86_64

A flaw was found in the way Samba handled file descriptors. If an attacker were able to open a large number of file descriptors on the Samba server, they could flip certain stack bits to '1' values, resulting in the Samba server smbd crashing. CVE-2011-0719 After installing this update, the smb...

Scientific Linux Security Update : samba on SL3.x, SL4.x, SL5.x i386/x86_64

NOTE: This errata went out 2010-09-15, but this email was not sent. A missing array boundary checking flaw was found in the way Samba parsed the binary representation of Windows security identifiers SIDs. A malicious client could send a specially crafted SMB request to the Samba server, resulting...

Scientific Linux Security Update : samba on SL3.x, SL4.x i386/x86_64

A heap-based buffer overflow flaw was found in the way Samba clients handle over-sized packets. If a client connected to a malicious Samba server, it was possible to execute arbitrary code as the Samba client user. It was also possible for a remote user to send a specially crafted print request t...

Scientific Linux Security Update : samba on SL5.x, SL4.x, SL3.x i386/x86_64

A buffer overflow flaw was found in the way Samba creates NetBIOS replies. If a Samba server is configured to run as a WINS server, a remote unauthenticated user could cause the Samba server to crash or execute arbitrary code. CVE-2007-5398 A heap based buffer overflow flaw was found in the way...

Scientific Linux Security Update : samba on SL4.x, SL5.x i386/x86_64

A flaw was found in the way Samba handled file descriptors. If an attacker were able to open a large number of file descriptors on the Samba server, they could flip certain stack bits to '1' values, resulting in the Samba server smbd crashing. CVE-2011-0719 After installing this update, the smb...

Scientific Linux Security Update : samba on SL3.x, SL4.x i386/x86_64

An input sanitization flaw was found in the way Samba parsed client data. A malicious client could send a specially crafted SMB packet to the Samba server, resulting in arbitrary code execution with the privileges of the Samba server smbd. CVE-2010-2063 After installing this update, the smb servi...

Scientific Linux Security Update : samba and samba3x on SL5.x i386/x86_64

An input sanitization flaw was found in the way Samba parsed client data. A malicious client could send a specially crafted SMB packet to the Samba server, resulting in arbitrary code execution with the privileges of the Samba server smbd. CVE-2010-2063 After installing this update, the smb servi...

CentOS Update for libsmbclient CESA-2012:0465 centos6

Check for the Version of libsmbclient OpenVAS Vulnerability Test CentOS Update for libsmbclient CESA-2012:0465 centos6 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify...

CentOS Update for libsmbclient CESA-2012:0465 centos5

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CentOS Update for samba CESA-2011:1219 centos4 x86_64

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CentOS Update for samba3x CESA-2011:1220 centos5 x86_64

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...