Detections
Analytics
GLSA-201206-22 : Samba: Multiple vulnerabilities
critical Nessus Plugin ID 59675
Language:
Synopsis
The remote Gentoo host is missing one or more security-related patches.Description
The remote host is affected by the vulnerability described in GLSA-201206-22 (Samba: Multiple vulnerabilities)Multiple vulnerabilities have been discovered in Samba. Please review the CVE identifiers referenced below for details.
Impact :
A remote attacker could possibly execute arbitrary code with root privileges, cause a Denial of Service condition, take ownership of shared files, or bypass file permissions. Furthermore, a local attacker may be able to cause a Denial of Service condition or obtain sensitive information in a Samba credentials file.
Workaround :
There is no known workaround at this time.
Solution
All Samba users should upgrade to the latest version:# emerge --sync # emerge --ask --oneshot --verbose '>=net-fs/samba-3.5.15'
See Also
Plugin Details
Severity: Critical
ID: 59675
File Name: gentoo_GLSA-201206-22.nasl
Version: 1.14
Type: local
Family: Gentoo Local Security Checks
Published: 6/25/2012
Updated: 1/6/2021
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: High
Score: 7.4
CVSS v2
Risk Factor: Critical
Base Score: 10
Temporal Score: 8.3
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: p-cpe:/a:gentoo:linux:samba, cpe:/o:gentoo:linux
Required KB Items: Host/local_checks_enabled, Host/Gentoo/release, Host/Gentoo/qpkg-list
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 6/24/2012
Exploitable With
CANVAS (CANVAS)
Core Impact
Metasploit (Samba SetInformationPolicy AuditEventsInfo Heap Overflow)
Reference Information
CVE: CVE-2009-2906, CVE-2009-2948, CVE-2010-0728, CVE-2010-1635, CVE-2010-1642, CVE-2010-2063, CVE-2010-3069, CVE-2011-0719, CVE-2011-1678, CVE-2011-2724, CVE-2012-0870, CVE-2012-1182, CVE-2012-2111
BID: 40097, 40884, 43212, 46597, 49939, 36572, 36573, 38326, 38606, 52103, 52973, 53307
CWE: 264
GLSA: 201206-22