Lucene search
+L

267 matches found

Oracle linux
Oracle linux
added 2018/06/25 12:00 a.m.310 views

samba security and bug fix update

3.6.23-51.0.1 - Remove use-after-free talloctos inlined function problem John Haxby orabug 18253258 3.6.24-51 - resolves: 1513877 - Fix memory leak in winbind 3.6.24-50 - resolves: 1553018 - Fix CVE-2018-1050 3.6.24-49 - resolves: 1536053 - Fix regression with non-wide symlinks to directories...

10CVSS0.99448EPSS
SaveExploits40
Citrix
Citrix
added 2018/03/01 12:00 a.m.11 views

vDisk Lost Properties in PVS Console

vDisk lost properties in PVS consoleafter move vDisk to individual file server with MS DFS enabled,vDisk is shown as No server and filesize can not be identified...

7AI score
SaveExploits0
Mageia
Mageia
added 2018/01/02 4:25 p.m.58 views

Updated samba packages fix security vulnerabilities

Updated samba packages fix security vulnerabilities: Stefan Metzmacher discovered that Samba incorrectly enforced SMB signing in certain situations. A remote attacker could use this issue to perform a man in the middle attack. CVE-2017-12150 Stefan Metzmacher discovered that Samba incorrectly...

9.8CVSS1.6AI score0.21408EPSS
SaveExploits0References13
RedHat Linux
RedHat Linux
added 2017/11/02 2:50 p.m.9 views

samba: SMB2 connections don't keep encryption across DFS redirects (incomplete fix of CVE-2017-12151)

It was discovered that the fix for CVE-2017-12151 was not properly shipped in erratum RHSA-2017:2858 for Red Hat Gluster Storage 3.3 for RHEL 6...

7.4CVSS7.3AI score0.04595EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2017/10/16 12:00 a.m.22 views

SUSE SLES12 Security Update : samba (SUSE-SU-2017:2726-1)

This update for samba fixes several issues. These security issues were fixed : - CVE-2017-12163: Prevent client short SMB1 write from writing server memory to file, leaking information from the server to the client bsc1058624. - CVE-2017-12150: Always enforce smb signing when it is configured...

7.4CVSS6.3AI score0.13334EPSS
SaveExploits0References11
OSV
OSV
added 2017/10/13 11:40 a.m.7 views

SUSE-SU-2017:2726-1 Security update for samba

This update for samba fixes several issues. These security issues were fixed: - CVE-2017-12163: Prevent client short SMB1 write from writing server memory to file, leaking information from the server to the client bsc1058624. - CVE-2017-12150: Always enforce smb signing when it is configured...

7.4CVSS7.3AI score0.13334EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
added 2017/10/13 12:00 a.m.55 views

Amazon Linux AMI : samba (ALAS-2017-909)

Server memory information leak over SMB1 : An information leak flaw was found in the way SMB1 protocol was implemented by Samba. A malicious client could use this flaw to dump server memory contents to a file on the samba share or to a shared printer, though the exact area of server memory cannot...

7.4CVSS6.4AI score0.13334EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2017/10/10 12:00 a.m.38 views

EulerOS 2.0 SP2 : samba (EulerOS-SA-2017-1234)

According to the versions of the samba packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - It was found that samba did not enforce 'SMB signing' when certain configuration options were enabled. A remote attacker could launch a...

7.4CVSS6.3AI score0.13334EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2017/10/10 12:00 a.m.39 views

EulerOS 2.0 SP1 : samba (EulerOS-SA-2017-1233)

According to the versions of the samba packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - It was found that samba did not enforce 'SMB signing' when certain configuration options were enabled. A remote attacker could launch a...

7.4CVSS6.3AI score0.13334EPSS
SaveExploits0References4
Broadcom
Broadcom
added 2017/09/29 12:00 a.m.10 views

BSA-2017-439

Security Advisory ID : BSA-2017-439 Component : Samba Revision : 2.0: Interim A flaw was found in the way samba client used encryption with the max protocol set as SMB3. The connection could lose the requirement for signing and encrypting to any DFS redirects, allowing an attacker to read or alte...

7.4CVSS6.5AI score0.04595EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2017/09/28 12:00 a.m.67 views

Samba 4.4.x < 4.4.16 / 4.5.x < 4.5.14 / 4.6.x < 4.6.8 Multiple Vulnerabilities

The version of Samba running on the remote host is 4.4.x prior to 4.4.16, 4.5.x prior to 4.5.14, or 4.6.x prior to 4.6.8. It is, therefore, affected by the following vulnerabilities: - Signing requirements are not properly enforced for SMB v1, v2, and v3. This could allow a man-in-the-middle...

7.4CVSS6.4AI score0.13334EPSS
SaveExploits0References9
Tenable Nessus
Tenable Nessus
added 2017/09/25 12:00 a.m.21 views

Debian DSA-3983-1 : samba - security update

Multiple security issues have been discoverd in Samba, a SMB/CIFS file, print, and login server for Unix : - CVE-2017-12150 Stefan Metzmacher discovered multiple code paths where SMB signing was not enforced. - CVE-2017-12151 Stefan Metzmacher discovered that tools using libsmbclient did not...

7.4CVSS6.4AI score0.13334EPSS
SaveExploits0References9
Tenable Nessus
Tenable Nessus
added 2017/09/22 12:00 a.m.35 views

RHEL 7 : samba (RHSA-2017:2790)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:2790 advisory. - samba: Some code path don't enforce smb signing, when they should CVE-2017-12150 - samba: SMB2 connections don't keep encryption across DF...

7.4CVSS6.6AI score0.13334EPSS
SaveExploits0References9
ALT Linux
ALT Linux
added 2017/09/20 12:00 a.m.103 views

Security fix for the ALT Linux 8 package samba-DC version 4.6.8-alt1

Sept. 20, 2017 Evgeny Sinelnikov 4.6.8-alt1 - Update for autumn security release: + CVE-2017-12150 SMB1/2/3 connections may not require signing where they should + CVE-2017-12151 SMB3 connections don't keep encryption across DFS redirects + CVE-2017-12163 Server memory information leak over SMB1...

5.8CVSS6.9AI score0.13334EPSS
SaveExploits0
Samba
Samba
added 2017/09/20 12:00 a.m.603 views

SMB3 connections don't keep encryption across DFS redirects

Description Client command line tools like 'smbclient' as well as applications using 'libsmbclient' library have support for requiring encryption. This is activated by the '-e|--encrypt' command line option or the smbcsetOptionSmbEncryptionLevel library call. By default, only SMB1 is used in orde...

7.4CVSS7.6AI score0.04595EPSS
SaveExploits0
ALT Linux
ALT Linux
added 2017/09/20 12:00 a.m.147 views

Security fix for the ALT Linux 10 package samba version 4.6.8-alt1.S1

Sept. 20, 2017 Evgeny Sinelnikov 4.6.8-alt1.S1 - Update for autumn security release: + CVE-2017-12150 SMB1/2/3 connections may not require signing where they should + CVE-2017-12151 SMB3 connections don't keep encryption across DFS redirects + CVE-2017-12163 Server memory information leak over SM...

5.8CVSS6.9AI score0.13334EPSS
SaveExploits0
Citrix
Citrix
added 2017/09/12 12:00 a.m.12 views

App Layering: Supporting DFS File Shares

The ELM can only access a DFS namespace if SMB 1.0 is enabled on the servers. If SMB 1.0 is disabled, as is becoming more common, the ELM cannot access a DFS namespace directly. Attempts to test the connection will fail...

7.1AI score
SaveExploits0
Citrix
Citrix
added 2017/06/26 12:00 a.m.14 views

Troubleshooting Replication Status in Citrix Provisioning Server

NOTE : Provisioning Services does not accomplish file replication. Replication can be completed using a some of the methods in the list: 1. Manual Copy 2. Robocopy 3. DFS Replication Most enterprise environments use automated software to replicate multiple files across servers on-demand or on a...

7.2AI score
SaveExploits0
Citrix
Citrix
added 2017/03/25 12:00 a.m.11 views

Unable to create an SR from a CIFS share containing DFS Targets

Unable to create an SR from a CIFS share containing DFS Targets. When trying to create the SR XenCenter gives an error: Unable to mount the directory specified in device configuration request The following errors can be seen in the logs: daemon.log Apr 6 10:35:04 dubvdodxa65-5 cifs.upcall: unable...

7.2AI score
SaveExploits0
Microsoft KB
Microsoft KB
added 2017/03/14 7:00 a.m.140 views

March 14, 2017—KB4012606 (OS Build 10240.17319)

None None...

9.3CVSS6.8AI score0.99693EPSS
SaveExploits152
Rows per page
Query Builder