Debian DSA-2450-1 : samba - privilege escalation

Critical Nessus Plugin ID 58729

Synopsis

The remote Debian host is missing a security-related update.

Description

It was discovered that Samba, the SMB/CIFS file, print, and login server, contained a flaw in the remote procedure call (RPC) code which allowed remote code execution as the super user from an unauthenticated connection.

Solution

Upgrade the samba packages.

For the stable distribution (squeeze), this problem has been fixed in version 2:3.5.6~dfsg-3squeeze7.

See Also

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=668309

https://packages.debian.org/source/squeeze/samba

https://www.debian.org/security/2012/dsa-2450

Plugin Details

Severity: Critical

ID: 58729

File Name: debian_DSA-2450.nasl

Version: 1.10

Type: local

Agent: unix

Published: 2012/04/13

Updated: 2018/11/10

Dependencies: 12634

Risk Information

Risk Factor: Critical

CVSS v2.0

Base Score: 10

Temporal Score: 8.3

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Temporal Vector: CVSS2#E:F/RL:OF/RC:C

Vulnerability Information

CPE: p-cpe:/a:debian:debian_linux:samba, cpe:/o:debian:debian_linux:6.0

Required KB Items: Host/local_checks_enabled, Host/Debian/release, Host/Debian/dpkg-l

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 2012/04/12

Exploitable With

CANVAS (CANVAS)

Core Impact

Metasploit (Samba SetInformationPolicy AuditEventsInfo Heap Overflow)

Reference Information

CVE: CVE-2012-1182

BID: 52973

DSA: 2450