11629 matches found
RHEL 8 : samba (RHSA-2021:5082)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:5082 advisory. Samba is an open-source implementation of the Server Message Block SMB protocol and the related Common Internet File System CIFS protocol,...
The vulnerability of the SMB1 protocol implementation in Samba network communication software lies in the ability to convert the client connection to an authentication with open text. This allows attackers to carry out a “man-in-the-middle” attack.
The vulnerability of the SMB1 protocol implementation in the Samba networking software lies in the ability to convert the client connection to an authentication with open text. Exploiting this vulnerability allows a remote attacker to carry out a “man-in-the-middle” attack...
The functionality of creating accounts within the MachineAccountQuota domain of Samba networking applications is vulnerable, allowing attackers to increase their privileges.
The vulnerability of the MachineAccountQuota function, which is used for creating accounts within a Samba network interface, relates to the ability to create accounts with elevated privileges. Exploiting this vulnerability could allow an attacker to increase their privileges remotely...
Security fix for the ALT Linux 10 package samba version 4.14.10-alt3
Dec. 13, 2021 Evgeny Sinelnikov 4.14.10-alt3 - Update for the latest fixes release of Samba 4.14 + CVE-2020-25727 idmapnss, krb5 and s3-auth regressions + CVE-2021-3670 ldapserver, dsdb/anr and ldb libldb-2.3.2-alt2 regressions + smbd: s3-dsgetdcname: handle numips == 0 + dsdb: Use...
Ubuntu 20.04 LTS : Samba regression (USN-5142-3)
The remote Ubuntu 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5142-3 advisory. USN-5142-1 fixed vulnerabilities in Samba. Some of the upstream changes introduced a regression in Kerberos authentication in certain environments. Please see the...
Kali Linux 2021.4 released with Samba compatibility, Apple M1 support, 9 new tools
By Waqas The release of the new Kali Linux 2021.4 has been grabbing headlines for the array of new capabilities and tools embedded with it. This is a post from HackRead.com Read the original post: Kali Linux 2021.4 released with Samba compatibility, Apple M1 support, 9 new tools...
The vulnerability of the MIT Kerberos Samba AD DC network communication software component allows attackers to enhance their privileges.
The vulnerability of the MIT Kerberos Samba AD DC network communication component programs is related to the ability to support RODC functionality. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...
Updated heimdal packages fix security vulnerability
A null pointer de-reference was found in the way samba kerberos server handled missing sname in TGS-REQ Ticket Granting Server - Request. An authenticated user could use this flaw to crash a samba server using heimdal...
MGASA-2021-0543 Updated heimdal packages fix security vulnerability
A null pointer de-reference was found in the way samba kerberos server handled missing sname in TGS-REQ Ticket Granting Server - Request. An authenticated user could use this flaw to crash a samba server using heimdal...
Ubuntu 18.04 LTS : Samba vulnerabilities (USN-5174-1)
The remote Ubuntu 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5174-1 advisory. Stefan Metzmacher discovered that Samba incorrectly handled SMB1 client connections. A remote attacker could possibly use this issue to downgrade...
Ubuntu: Security Advisory (USN-5174-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu: Security Advisory (USN-5142-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 20.04 LTS : Samba regressions (USN-5142-2)
The remote Ubuntu 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5142-2 advisory. USN-5142-1 fixed vulnerabilities in Samba. Some of the upstream changes introduced regressions in name mapping and backups. Please see the following upstream bugs...
USN-5142-2: Samba regressions
USN-5142-1 fixed vulnerabilities in Samba. Some of the upstream changes introduced regressions in name mapping and backups. Please see the following upstream bugs for more information: https://bugzilla.samba.org/showbug.cgi?id=14901 https://bugzilla.samba.org/showbug.cgi?id=14918 This update fixe...
USN-5142-2 samba regressions
USN-5142-1 fixed vulnerabilities in Samba. Some of the upstream changes introduced regressions in name mapping and backups. Please see the following upstream bugs for more information: https://bugzilla.samba.org/showbug.cgi?id=14901 https://bugzilla.samba.org/showbug.cgi?id=14918 This update fixe...
Security Bulletin: A vulnerability in Samba affects IBM Spectrum Scale SMB protocol access method (CVE-2021-20254)
Summary A Samba vulnerability affects IBM Spectrum Scale SMB protocol access method that could allow a remote attacker to bypass security restrictions and gain unauthorized access to files. Vulnerability Details CVEID: CVE-2021-20254 DESCRIPTION: Samba could allow a remote authenticated attacker ...
USN-5174-1: Samba vulnerabilities
Stefan Metzmacher discovered that Samba incorrectly handled SMB1 client connections. A remote attacker could possibly use this issue to downgrade connections to plaintext authentication. CVE-2016-2124 Andrew Bartlett discovered that Samba incorrectly mapping domain users to local users. An...
USN-5174-1 samba vulnerabilities
Stefan Metzmacher discovered that Samba incorrectly handled SMB1 client connections. A remote attacker could possibly use this issue to downgrade connections to plaintext authentication. CVE-2016-2124 Andrew Bartlett discovered that Samba incorrectly mapping domain users to local users. An...
