SLES9: Security update for Samba

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: libsmbclient samba-vscan samba libsmbclient-devel samba-winbind samba-python samba-doc samba-pdb samba-client For more information, please visit the referenc...

SLES9: Security update for Samba

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: libsmbclient libsmbclient-devel samba samba-client samba-doc samba-pdb samba-python samba-vscan samba-winbind For more information, please visit the referenc...

SLES9: Security update for Samba

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: samba-doc samba-python samba-client libsmbclient-devel samba-winbind libsmbclient samba samba-pdb samba-vscan For more information, please visit the referenc...

SLES9: Security update for Samba

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: samba-client samba-doc samba-python samba-pdb samba samba-winbind libsmbclient-devel libsmbclient samba-vscan For more information, please visit the referenc...

Samba < 3.0.32 winbind Daemon DoS Vulnerability

Samba is prone to a winbind daemon denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Race condition

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None. Reason: this candidate is not a security issue. It was originally created based on one vendor's misinterpretation of an upstream changelog comment that referred to a race condition in the winbind daemon aka winbindd in Samba...

CVE-2008-6800

CVE-2008-6800 is rejected; not a security issue per the description.

PPPD Winbind插件本地权限提升漏洞

BUGTRAQ ID: 18849 CVECAN ID: CVE-2006-2194 ppp（Paul's PPP Package）是一个开放源码的软件包，用于在Linux和Solaris系统上实现点对点协议。 ppp对插件执行权限的控制上存在漏洞，本地攻击者可能利用此漏洞提升自己的权限。 pppd的winbind插件没有检查setuid调用的结果。在对用户进程数配置了PAM限制且启用了winbind插件的系统上，本地攻击者可以利用这个漏洞以root权限执行winbind NTLM认证帮助程序，可能导致权限提升。 Ubuntu Linux 6.06 LTS powerpc Ubuntu...

SuSE 10 Security Update : Samba (ZYPP Patch Number 1961)

Fix pam config file parsing in pamwinbind; bso 3916. - Prevent potential crash in winbindd's credential cache handling; 184450. - Fix memory exhaustion DoS; CVE-2006-3403; 190468. - Fix the munlock call, samba.org svn rev r16755 from Volker. - Change the kerberos principal for LDAP authentication...

samba incorrect primary group assignment for domain users using the rfc2307 or sfu winbind nss info plugin

The Winbind nssinfo extension nsswitch/idmapad.c in idmapad.so in Samba 3.0.25 through 3.0.25c, when the "winbind nss info" option is set to rfc2307 or sfu, grants all local users the privileges of gid 0 when the 1 RFC2307 or 2 Services for UNIX SFU primary group attribute is not defined...

samba incorrect primary group assignment for domain users using the rfc2307 or sfu winbind nss info plugin

The Winbind nssinfo extension nsswitch/idmapad.c in idmapad.so in Samba 3.0.25 through 3.0.25c, when the "winbind nss info" option is set to rfc2307 or sfu, grants all local users the privileges of gid 0 when the 1 RFC2307 or 2 Services for UNIX SFU primary group attribute is not defined...

Ubuntu 5.10 / 6.06 LTS : ppp vulnerability (USN-310-1)

Marcus Meissner discovered that the winbind plugin of pppd does not check the result of the setuid call. On systems that configure PAM limits for the maximum number of user processes and enable the winbind plugin, a local attacker could exploit this to execute the winbind NTLM authentication help...

openSUSE 10 Security Update : samba (samba-3827)

The previous security fix for CVE-2007-2447 missed one character in the shell escape handling. Also fixed were some regressions introduced by the previous update. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSU...

openSUSE 10 Security Update : samba (samba-2584)

"A logic error in the deferred open code can lead to an infinite loop in Samba's smbd daemon. In addition the following changes are included with these packages : - Disable broken DCERPC funnel patch; 242833. - Avoid winbind event handler for internal domains. - Fix smbcontrol winbind offline;...

openSUSE 10 Security Update : samba (samba-1830)

Prevent potential crash in winbindd's credential cache handling; 184450. - Fix memory exhaustion DoS; CVE-2006-3403; 190468. - Fix the munlock call, samba.org svn rev r16755 from Volker. - Change the kerberos principal for LDAP authentication to netbios-name$@realm from host/name@realm; 184450. -...

FreeBSD : samba -- nss_info plugin privilege escalation vulnerability (2bc96f18-683f-11dc-82b6-02e0185f8d72)

The Samba development team reports : The idmapad.so library provides an nssinfo extension to Winbind for retrieving a user's home directory path, login shell and primary group id from an Active Directory domain controller. This functionality is enabled by defining the 'winbind nss info' smb.conf...

CVE-2007-4138

The Winbind nssinfo extension nsswitch/idmapad.c in idmapad.so in Samba 3.0.25 through 3.0.25c, when the "winbind nss info" option is set to rfc2307 or sfu, grants all local users the privileges of gid 0 when the 1 RFC2307 or 2 Services for UNIX SFU primary group attribute is not defined...

CVE-2007-4138

The Winbind nssinfo extension nsswitch/idmapad.c in idmapad.so in Samba 3.0.25 through 3.0.25c, when the "winbind nss info" option is set to rfc2307 or sfu, grants all local users the privileges of gid 0 when the 1 RFC2307 or 2 Services for UNIX SFU primary group attribute is not defined...

Code injection

The Winbind nssinfo extension nsswitch/idmapad.c in idmapad.so in Samba 3.0.25 through 3.0.25c, when the "winbind nss info" option is set to rfc2307 or sfu, grants all local users the privileges of gid 0 when the 1 RFC2307 or 2 Services for UNIX SFU primary group attribute is not defined...

DEBIAN-CVE-2007-4138

The Winbind nssinfo extension nsswitch/idmapad.c in idmapad.so in Samba 3.0.25 through 3.0.25c, when the "winbind nss info" option is set to rfc2307 or sfu, grants all local users the privileges of gid 0 when the 1 RFC2307 or 2 Services for UNIX SFU primary group attribute is not defined...