Updated samba packages fix multiple vulnerabilities

Updated samba packages fix security vulnerabilities: Information leak vulnerability in the VFS code, allowing an authenticated user to retrieve eight bytes of uninitialized memory when shadow copy is enabled CVE-2014-0178. Samba versions before 3.6.24, 4.0.19, and 4.1.9 are vulnerable to a denial...

Samba SMB 2.2.x,CIFS/9000 Server A.01.x Packet Assembling Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7106/info Samba is prone to a buffer-overflow vulnerability when the 'smbd' service tries to reassemble specially crafted SMB/CIFS packets. An attacker can exploit this vulnerability by creating a specially formatted...

[slackware-security] samba

New samba packages are available for Slackware 14.0, 14.1, and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/samba-4.1.9-i486-1slack14.1.txz: Upgraded. This update fixes bugs and security issues, including a flaw in Samba's internal DNS...

Samba 3.6.x < 3.6.24 / 4.0.x < 4.0.19 / 4.1.x < 4.1.9 Multiple Vulnerabilities

According to its banner, the version of Samba on the remote host is 3.6.x prior to 3.6.24, 4.0.x prior to 4.0.19, or 4.1.x prior to 4.1.9. It is, therefore, affected by the following vulnerabilities : - A denial of service flaw exists with 'nmbd'. A remote attacker, with a specially crafted packe...

CVE-2014-3493

The pushascii function in smbd in Samba 3.6.x before 3.6.24, 4.0.x before 4.0.19, and 4.1.x before 4.1.9 allows remote authenticated users to cause a denial of service memory corruption and daemon crash via an attempt to read a Unicode pathname without specifying use of Unicode, leading to a...

samba -- multiple vulnerabilities

The samba project reports: A malformed packet can cause the nmbd server to loop the CPU and prevent any further NetBIOS name service. Valid unicode path names stored on disk can cause smbd to crash if an authenticated client attempts to read them using a non-unicode request...

Fedora 20 : lynis-1.5.6-1.fc20 (2014-7400)

== 1.5.6 2014-06-12 == New : - Test for PHP binary and PHP version - Don't perform registerglobal test for systems running PHP 5.4.0 and later PHP-2368 - Debug function can be activated via --debug or profile Changes : - Extended IsRunning function - Removed suggestion from secure shell test...

CVE-2013-4124

Integer overflow in the readnttransealist function in nttrans.c in smbd in Samba 3.x before 3.5.22, 3.6.x before 3.6.17, and 4.x before 4.0.8 allows remote attackers to cause a denial of service memory consumption via a malformed packet...

CVE-2013-4124

CVE-2013-4124 (Samba) is an integer overflow in read_nttrans_ea_list (nttrans.c) that can be triggered by a malformed EA list, potentially leading to memory consumption DoS. Affected are Samba 3.x before 3.5.22, 3.6.x before 3.6.17, and 4.x before 4.0.8. The initial entry specifies the vulnerabil...

Scientific Linux Security Update : samba on SL3.x, SL4.x, SL5.x i386/x86_64

NOTE: This errata went out 2010-09-15, but this email was not sent. A missing array boundary checking flaw was found in the way Samba parsed the binary representation of Windows security identifiers SIDs. A malicious client could send a specially crafted SMB request to the Samba server, resulting...

Fedora 16 : samba-3.6.5-85.fc16 (2012-7006)

Security Release, fixes CVE-2012-2111 Fix dependency on private libkrb5 symbol. This fixes smbd and nmbd startup issues. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and...

CVE-2012-2111

The CVE-2012-2111 vulnerability is in the Samba RPC code (LSA procedures) that fail to properly restrict modifications to the privileges database, enabling a remote authenticated user to obtain the take_ownership privilege. Affected lines indicate Samba 3.4.x before 3.4.17, 3.5.x before 3.5.15, a...

PT-2012-1096

Name of the Vulnerable Software and Affected Versions Samba versions prior to 3.4.17 Samba versions prior to 3.5.15 Samba versions prior to 3.6.5 samba3x-client-3.5.10 samba3x-winbind-devel-3.5.10 samba3x-swat-3.5.10 samba3x-domainjoin-gui-3.5.10 samba3x-winbind-3.5.10 samba3x-common-3.5.10...

CVE-2012-2111: Undefined Security Weakness

The 1 CreateAccount, 2 OpenAccount, 3 AddAccountRights, and 4 RemoveAccountRights LSA RPC procedures in smbd in Samba 3.4.x before 3.4.17, 3.5.x before 3.5.15, and 3.6.x before 3.6.5 do not properly restrict modifications to the privileges database, which allows remote authenticated users to obta...

RedHat Update for samba3x RHSA-2012:0466-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

samba: Any Batched ("AndX") request processing infinite recursion and heap-based buffer overflow

Heap-based buffer overflow in process.c in smbd in Samba 3.0, as used in the file-sharing service on the BlackBerry PlayBook tablet before 2.0.0.7971 and other products, allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via a Batched aka AndX...

DEBIAN-CVE-2012-0870

Heap-based buffer overflow in process.c in smbd in Samba 3.0, as used in the file-sharing service on the BlackBerry PlayBook tablet before 2.0.0.7971 and other products, allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via a Batched aka AndX...

CVE-2012-0870

Heap-based buffer overflow in process.c in smbd in Samba 3.0, as used in the file-sharing service on the BlackBerry PlayBook tablet before 2.0.0.7971 and other products, allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via a Batched aka AndX...

CVE-2012-0870

CVE-2012-0870 is a heap-based buffer overflow in Samba 3.x’s smbd (process.c) used for file sharing. The vulnerability allows a remote attacker to cause a daemon crash or potentially execute arbitrary code via a Batched/AndX request that triggers infinite recursion. The linked OpenVAS/Nessus entr...

CVE-2012-0870: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in process.c in smbd in Samba 3.0, as used in the file-sharing service on the BlackBerry PlayBook tablet before 2.0.0.7971 and other products, allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via a Batched aka AndX...