Detections
Analytics
Samba < 3.0.37 / 3.2.15 / 3.3.8 / 3.4.2 Multiple Vulnerabilities
medium Nessus Plugin ID 41970
Language:
Synopsis
The remote Samba server may be affected by multiple vulnerabilities.Description
According to its banner, the version of Samba server on the remote host is earlier than 3.0.37 / 3.2.15 / 3.3.8 / 3.4.2. Such versions are potentially affected by multiple issues :- If a user in '/etc/passwd' is misconfigured to have an empty home directory, then connecting to the home share of this user will use the root of the file system as the home directory. (CVE-2009-2813)
- Specially crafted SMB requests on authenticated SMB connections can send smbd into a 100% loop, causing a denial of service. (CVE-2009-2906)
- When 'mount.cifs' is installed as a setuid program, a user can pass it a credential or password path to which he or she does not have access and then use the '--verbose' option to view the first line of that file.
(CVE-2009-2948)
Solution
Upgrade to Samba 3.0.37 / 3.2.15 / 3.3.8 / 3.4.2 or later.See Also
https://www.samba.org/samba/security/CVE-2009-2906.html
Plugin Details
Severity: Medium
ID: 41970
File Name: samba_3_2_15.nasl
Version: 1.16
Type: remote
Family: Misc.
Published: 10/2/2009
Updated: 11/15/2018
Configuration: Enable paranoid mode
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.6
CVSS v2
Risk Factor: Medium
Base Score: 6
Temporal Score: 4.4
Vector: CVSS2#AV:N/AC:M/Au:S/C:P/I:P/A:P
Vulnerability Information
CPE: cpe:/a:samba:samba
Required KB Items: Settings/ParanoidReport, SMB/samba, SMB/NativeLanManager
Exploit Ease: No known exploits are available
Patch Publication Date: 10/1/2009
Vulnerability Publication Date: 10/1/2009
Reference Information
CVE: CVE-2009-2813, CVE-2009-2906, CVE-2009-2948
CWE: 264