Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-2054-1
HistoryDec 11, 2013 - 12:00 a.m.

Samba vulnerabilities

2013-12-1100:00:00
ubuntu.com
30

10 High

AI Score

Confidence

High

8.3 High

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:A/AC:L/Au:N/C:C/I:C/A:C

0.007 Low

EPSS

Percentile

80.4%

JSON

Releases

  • Ubuntu 13.10
  • Ubuntu 13.04
  • Ubuntu 12.10
  • Ubuntu 12.04
  • Ubuntu 10.04

Packages

  • samba - SMB/CIFS file, print, and login server for Unix

Details

It was discovered that Winbind incorrectly handled invalid group names with
the require_membership_of parameter. If an administrator used an invalid
group name by mistake, access was granted instead of having the login fail.
(CVE-2012-6150)

Stefan Metzmacher and Michael Adam discovered that Samba incorrectly
handled DCE-RPC fragment length fields. A remote attacker could use this
issue to cause Samba to crash, resulting in a denial of service, or
possibly execute arbitrary code as the root user. (CVE-2013-4408)

Hemanth Thummala discovered that Samba incorrectly handled file
permissions when vfs_streams_depot or vfs_streams_xattr were enabled. A
remote attacker could use this issue to bypass intended restrictions.
(CVE-2013-4475)

OSVersionArchitecturePackageVersionFilename
Ubuntu13.10noarchsamba< 2:3.6.18-1ubuntu3.1UNKNOWN
Ubuntu13.10noarchlibnss-winbind< 2:3.6.18-1ubuntu3.1UNKNOWN
Ubuntu13.10noarchlibpam-smbpass< 2:3.6.18-1ubuntu3.1UNKNOWN
Ubuntu13.10noarchlibpam-winbind< 2:3.6.18-1ubuntu3.1UNKNOWN
Ubuntu13.10noarchlibsmbclient< 2:3.6.18-1ubuntu3.1UNKNOWN
Ubuntu13.10noarchlibsmbclient-dev< 2:3.6.18-1ubuntu3.1UNKNOWN
Ubuntu13.10noarchlibwbclient-dev< 2:3.6.18-1ubuntu3.1UNKNOWN
Ubuntu13.10noarchlibwbclient0< 2:3.6.18-1ubuntu3.1UNKNOWN
Ubuntu13.10noarchsamba-common-bin< 2:3.6.18-1ubuntu3.1UNKNOWN
Ubuntu13.10noarchsamba-dbg< 2:3.6.18-1ubuntu3.1UNKNOWN
Rows per page:
1-10 of 671

Related

suse 3
openvas 58
nessus 47
fedora 12
altlinux 6
freebsd 2
mageia 2
redhat 5
oraclelinux 5
debian 1
osv 1
veracode 5
centos 4
securityvulns 3
debiancve 3
cve 3
ubuntucve 3
samba 3
prion 3
f5 2
slackware 2
gentoo 1
ibm 2
suse
suse
Security update for Samba (important)
2014-01-07 00:04:36
Security update for samba (important)
2016-04-20 12:11:11
Security update for samba (important)
2016-04-20 12:07:48
openvas
openvas
SUSE: Security Advisory for Samba (SUSE-SU-2014:0024-1)
2015-10-13 00:00:00
SUSE: Security Advisory (SUSE-SU-2014:0024-1)
2021-06-09 00:00:00
Ubuntu: Security Advisory (USN-2054-1)
2013-12-17 00:00:00
nessus
nessus
Samba < 3.6.22 / 4.0.13 / 4.1.3 Multiple Vulnerabilities
2013-12-26 00:00:00
Ubuntu 10.04 LTS / 12.04 LTS / 12.10 / 13.04 / 13.10 : samba vulnerabilities (USN-2054-1)
2013-12-12 00:00:00
SuSE 11.2 / 11.3 Security Update : Samba (SAT Patch Numbers 8655 / 8656)
2014-01-07 00:00:00
fedora
fedora
[SECURITY] Fedora 19 Update: samba-4.0.13-1.fc19
2013-12-15 03:35:27
[SECURITY] Fedora 20 Update: samba-4.1.3-2.fc20
2013-12-24 03:39:37
[SECURITY] Fedora 19 Update: samba-4.0.16-1.fc19
2014-03-28 03:18:38
altlinux
altlinux
Security fix for the ALT Linux 8 package samba version 4.1.3-alt1
2013-12-09 00:00:00
Security fix for the ALT Linux 10 package samba version 4.1.3-alt1
2013-12-09 00:00:00
Security fix for the ALT Linux 8 package samba-DC version 4.1.3-alt1
2013-12-09 00:00:00
freebsd
freebsd
samba -- multiple vulnerabilities
2012-06-12 00:00:00
samba -- ACLs are not checked on opening an alternate data stream on a file or directory
2013-06-12 00:00:00
mageia
mageia
Updated samba package fixes multiple vulnerabilities
2013-12-13 02:22:59
Updated samba packages fix CVE-2013-4475
2013-11-22 23:10:41
redhat
redhat
(RHSA-2014:0009) Important: samba security update
2014-01-06 00:00:00
(RHSA-2013:1806) Important: samba and samba3x security update
2013-12-09 00:00:00
(RHSA-2013:1805) Important: samba4 security update
2013-12-09 00:00:00
oraclelinux
oraclelinux
samba and samba3x security update
2013-12-09 00:00:00
samba4 security update
2013-12-09 00:00:00
samba and samba3x security update
2014-03-25 00:00:00
debian
debian
[SECURITY] [DSA 2812-1] samba security update
2013-12-09 10:13:23
osv
osv
samba - several
2013-12-09 00:00:00
veracode
veracode
Privilege Escalation
2019-05-02 05:00:33
Bypass Access Restriction
2019-01-15 08:59:04
Remote Code Execution (RCE)
2019-01-15 08:53:06
centos
centos
libsmbclient, samba, samba3x security update
2013-12-10 01:03:24
samba4 security update
2013-12-10 01:02:20
libsmbclient, samba, samba3x security update
2014-03-25 15:09:56
securityvulns
securityvulns
Samba buffer overflow
2014-01-08 00:00:00
[ MDVSA-2013:278 ] samba
2013-11-26 00:00:00
Samba protection bypass
2013-11-26 00:00:00
debiancve
debiancve
CVE-2012-6150
2013-12-03 19:55:00
CVE-2013-4475
2013-11-13 15:55:00
CVE-2013-4408
2013-12-10 06:14:00
cve
cve
CVE-2012-6150
2013-12-03 19:55:00
CVE-2013-4475
2013-11-13 15:55:00
CVE-2013-4408
2013-12-10 06:14:00
ubuntucve
ubuntucve
CVE-2012-6150
2013-12-03 00:00:00
CVE-2013-4475
2013-11-13 00:00:00
CVE-2013-4408
2013-12-09 00:00:00
samba
samba
pam_winbind login without require_membership_of restrictions
2013-12-09 00:00:00
ACLs are not checked on opening an alternate
2013-11-11 00:00:00
DCE-RPC fragment length field is incorrectly checked.
2013-12-09 00:00:00
prion
prion
Design/Logic Flaw
2013-12-03 19:55:00
Design/Logic Flaw
2013-11-13 15:55:00
Heap overflow
2013-12-10 06:14:00
f5
f5
K15874 : Samba vulnerability CVE-2013-4475
2014-12-02 00:00:00
SOL15874 - Samba vulnerability CVE-2013-4475
2014-12-01 00:00:00
slackware
slackware
samba
2014-01-13 22:30:45
[slackware-security] samba
2013-11-19 01:51:01
gentoo
gentoo
Samba: Multiple vulnerabilities
2015-02-25 00:00:00
ibm
ibm
Security Bulletin: Samba vulnerability issue on IBM Storwize V7000 Unified (CVE-2013-4408 and CVE-2012-6105)
2018-06-18 00:07:38
Security Bulletin: Samba vulnerability issue on SONAS (CVE-2013-4408 and CVE-2012-6105)
2018-06-18 00:07:42

10 High

AI Score

Confidence

High

8.3 High

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:A/AC:L/Au:N/C:C/I:C/A:C

0.007 Low

EPSS

Percentile

80.4%

JSON
Related for USN-2054-1
suse3openvas58nessus47fedora12altlinux6freebsd2mageia2redhat5oraclelinux5debian1osv1veracode5centos4securityvulns3debiancve3cve3ubuntucve3samba3prion3f52slackware2gentoo1ibm2