IT-Grundschutz M4.333: Sichere Konfiguration von Winbind unter Samba

IT-Grundschutz M4.333: Sichere Konfiguration von Winbind unter Samba Stand: 14. Ergaenzungslieferung 14. EL. Copyright C 2015 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

IT-Grundschutz M4.333: Sichere Konfiguration von Winbind unter Samba

IT-Grundschutz M4.333: Sichere Konfiguration von Winbind unter Samba Stand: 14. Ergänzungslieferung 14. EL. OpenVAS Vulnerability Test $Id: GSHBM4333.nasl 7883 2017-11-23 11:22:59Z emoss $ IT-Grundschutz, 14. EL, Maßnahme 4.333 Authors: Thomas Rotter Copyright: Copyright c 2015 Greenbone Networks...

libsmbclient, libwbclient, samba security update

CentOS Errata and Security Advisory CESA-2015:0252 Updated samba packages that fix one security issue are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which...

libsmbclient, samba security update

CentOS Errata and Security Advisory CESA-2015:0251 Updated samba packages that fix one security issue are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Critical security impact. A Common Vulnerability Scoring System CVSS base score, which...

SUSE-SU-2015:0353-1 Security update for samba

samba was updated to fix one security issue. This security issue was fixed: - CVE-2015-0240: Don't call tallocfree on an uninitialized pointer bnc917376. These non-security issues were fixed: - Fix vfssnapper DBus string handling bso11055, bnc913238. - Fix libsmbclient DFS referral handling. +...

SUSE-SU-2015:0371-1 Security update for Samba

Samba has been updated to fix one security issue: CVE-2015-0240: Don't call tallocfree on an uninitialized pointer bnc917376. Additionally, these non-security issues have been fixed: Realign the winbind request structure following requiremembershipof field expansion bnc913001. Reuse connections...

SuSE 11.3 Security Update : krb5 (SAT Patch Number 10282)

krb5 has been updated to fix four security issues : - gssprocesscontexttoken incorrectly frees context bsc912002. CVE-2014-5352 - kadmind doubly frees partial deserialization results bsc912002. CVE-2014-9421 - kadmind incorrectly validates server principal name bsc912002. CVE-2014-9422 - libgssrp...

SUSE-SU-2015:0257-1 Security update for krb5

krb5 has been updated to fix four security issues: CVE-2014-5352: gssprocesscontexttoken incorrectly frees context bsc912002 CVE-2014-9421: kadmind doubly frees partial deserialization results bsc912002 CVE-2014-9422: kadmind incorrectly validates server principal name bsc912002 CVE-2014-9423:...

openSUSE Security Update : samba (openSUSE-SU-2014:0405-1)

"Samba was updated to fix security issues and bugs : Security issues fixed : - Password lockout was not enforced for SAMR password changes, this allowed brute-force attacks on passwords. CVE-2013-4496; bnc849224. - The DCE-RPC fragment length field is incorrectly checked, which could expose samba...

openSUSE Security Update : samba (openSUSE-2012-109)

" - Fix memory leak in parent smbd on connection; CVE-2012-0817; bso8724 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-109. The text description of this plugin is C SUSE LLC...

samba: pam_winbind fails open when non-existent group specified to require_membership_of

The winbindnamelisttosidstringlist function in nsswitch/pamwinbind.c in Samba through 4.1.2 handles invalid requiremembershipof group names by accepting authentication by any user, which allows remote authenticated users to bypass intended access restrictions in opportunistic circumstances by...

SuSE 11.3 Security Update : Samba (SAT Patch Number 9010)

"The Samba fileserver suite was updated to fix bugs and security issues. The following security issue have been fixed : - No Password lockout or ratelimiting was enforced for SAMR password changes, making brute force guessing attacks possible. CVE-2013-4496. Also the following feature has been...

samba: pam_winbind fails open when non-existent group specified to require_membership_of

The winbindnamelisttosidstringlist function in nsswitch/pamwinbind.c in Samba through 4.1.2 handles invalid requiremembershipof group names by accepting authentication by any user, which allows remote authenticated users to bypass intended access restrictions in opportunistic circumstances by...

SuSE 11.2 / 11.3 Security Update : Samba (SAT Patch Numbers 8655 / 8656)

This update fixes the following security issues with samba : - DCERPC fraglen not checked. CVE-2013-4408. bnc844720 - winbind pam security problem. CVE-2012-6150. bnc853347 - No access check verification on stream files CVE-2013-4475. And fixes the following non-security issues :. bnc848101 -...

Fedora 20 : samba-4.1.3-2.fc20 (2013-23177)

Fix NULL pointer derreference in winbind debug message. Update to version 4.1.3 which fixes two security bugs. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as...

Ubuntu Update for samba USN-2054-1

Check for the Version of samba OpenVAS Vulnerability Test $Id: gbubuntuUSN20541.nasl 8672 2018-02-05 16:39:18Z teissa $ Ubuntu Update for samba USN-2054-1 Authors: System Generated Check Copyright: Copyright C 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; y...

Ubuntu: Security Advisory (USN-2054-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 10.04 LTS / 12.04 LTS / 12.10 / 13.04 / 13.10 : samba vulnerabilities (USN-2054-1)

It was discovered that Winbind incorrectly handled invalid group names with the requiremembershipof parameter. If an administrator used an invalid group name by mistake, access was granted instead of having the login fail. CVE-2012-6150 Stefan Metzmacher and Michael Adam discovered that Samba...

USN-2054-1: Samba vulnerabilities

It was discovered that Winbind incorrectly handled invalid group names with the requiremembershipof parameter. If an administrator used an invalid group name by mistake, access was granted instead of having the login fail. CVE-2012-6150 Stefan Metzmacher and Michael Adam discovered that Samba...

pam_winbind login without require_membership_of restrictions

Description Winbind allows for the further restriction of authenticated PAM logins using the requiremembershipof parameter. System administrators may specify a list of SIDs or groups for which an authenticated user must be a member of. If an authenticated user does not belong to any of the entrie...