- Tue Mar 8 2011 Guenther Deschner <gdeschner at     redhat.com> - 3.5.8-74

    - Update to 3.5.8

    - resolves: #617482

    - Thu Mar 3 2011 Guenther Deschner <gdeschner at       redhat.com> - 3.5.7-73

    - Security update to 3.5.7 to address CVE-2011-0719

    - resolves: #681852

    - Thu Jan 6 2011 Guenther Deschner <gdeschner at       redhat.com> - 3.5.6-72

    - Fix GSSAPI checksum for some SMB servers

    - resolves: #667644

    - Thu Nov 18 2010 Guenther Deschner <gdeschner at       redhat.com> - 3.5.6-71

    - Fix libsmbclient SMB signing

    - resolves: #598620

    - Mon Nov 1 2010 Guenther Deschner <gdeschner at       redhat.com> - 3.5.6-70

    - Handle no network case in init scripts

    - resolves: #604147

    - Fri Oct 8 2010 Guenther Deschner <gdeschner at       redhat.com> - 3.5.6-69

    - Update to 3.5.6

    - resolves: #617771

    - Thu Sep 9 2010 Guenther Deschner <gdeschner at       redhat.com> - 3.5.5-68

    - Security Release, fixes CVE-2010-3069

    - resolves: #630869

    - Thu Aug 26 2010 Guenther Deschner <gdeschner at       redhat.com> - 3.5.4-67

    - Put winbind krb5 locator plugin into a separate rpm

    - resolves: #627181

    - Tue Aug 24 2010 Guenther Deschner <gdeschner at       redhat.com> - 3.5.4-66

    - More fixes for winbind schannel

    - Thu Aug 19 2010 Guenther Deschner <gdeschner at       redhat.com> - 3.5.4-65

    - Fix winbind default domain

    - related: #618201

    - Wed Aug 18 2010 Guenther Deschner <gdeschner at       redhat.com> - 3.5.4-64

    - Fix offline authentication

    - resolves: #618201

    - Tue Aug 10 2010 Guenther Deschner <gdeschner at       redhat.com> - 3.5.4-63

    - Fix winbind secure channel (samlogonex)

    - Wed Jun 23 2010 Guenther Deschner <gdeschner at       redhat.com> - 3.5.4-62

    - Update to 3.5.4

    - Wed May 19 2010 Guenther Deschner <gdeschner at       redhat.com> - 3.5.3-61

    - Update to 3.5.3

    - Make sure nmb and smb initscripts return LSB compliant       return codes

    - Fix winbind over ipv6

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

A flaw was found in the way Samba handled file descriptors. If an attacker were able to open a large number of file descriptors on the Samba server, they could flip certain stack bits to '1' values, resulting in the Samba server (smbd) crashing. (CVE-2011-0719)

After installing this update, the smb service will be restarted automatically.

The remote Redhat Enterprise Linux 4 / 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2011:0305 advisory.

  - Samba unsafe fd_set usage (CVE-2011-0719)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Volker Lendecke discovered that Samba incorrectly handled certain file descriptors. A remote attacker could send a specially crafted request to the server and cause Samba to crash or hang, resulting in a denial of service.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

With this update samba is not prone to a remote denial of service attack anymore. (CVE-2011-0719)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-0305 advisory.

    - Security Release, fixes CVE-2011-0719

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-0306 advisory.

    - Security Release, fixes CVE-2011-0719

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
52723	Fedora 13 : samba-3.5.8-74.fc13 (2011-3120)	Nessus	Fedora Local Security Checks	3/21/2011	1/11/2021	medium
60971	Scientific Linux Security Update : samba3x on SL5.x i386/x86_64	Nessus	Scientific Linux Local Security Checks	8/1/2012	1/14/2021	medium
52489	RHEL 4 / 5 / 6 : samba (RHSA-2011:0305)	Nessus	Red Hat Local Security Checks	3/2/2011	4/21/2024	high
52477	Ubuntu 6.06 LTS / 8.04 LTS / 9.10 / 10.04 LTS / 10.10 : samba vulnerability (USN-1075-1)	Nessus	Ubuntu Local Security Checks	3/1/2011	9/19/2019	medium
75447	openSUSE Security Update : cifs-mount (openSUSE-SU-2011:0403-1)	Nessus	SuSE Local Security Checks	6/13/2014	1/14/2021	medium
53589	SuSE 10 Security Update : Samba (ZYPP Patch Number 7353)	Nessus	SuSE Local Security Checks	4/29/2011	1/19/2021	medium
57165	SuSE 10 Security Update : Samba (ZYPP Patch Number 7396)	Nessus	SuSE Local Security Checks	12/13/2011	1/19/2021	medium
68208	Oracle Linux 5 / 6 : samba (ELSA-2011-0305)	Nessus	Oracle Linux Local Security Checks	7/12/2013	10/22/2024	high
68209	Oracle Linux 5 : samba3x (ELSA-2011-0306)	Nessus	Oracle Linux Local Security Checks	7/12/2013	10/22/2024	high

Detections

Analytics

Plugins Search

medium

medium

high

medium

medium

medium

medium

high

high