The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2014-033:01 advisory.

    Samba is the suite of programs by which a lot of PC-related machines share files, printers, and other     information (such as lists of available files and printers). The Windows NT, OS/2, and Linux operating     systems support this natively, and add-on packages can enable the same thing for DOS, Windows, VMS, UNIX     of all kinds, MVS, and more. This package provides an SMB/CIFS server that can be used to provide network     services to SMB/CIFS clients. Samba uses NetBIOS over TCP/IP (NetBT) protocols and does NOT need the     NetBEUI (Microsoft Raw NetBIOS frame) protocol.
    Security issues fixed with this release:
     CVE-2013-0213     The Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.21, 3.6.x before 3.6.12, and 4.x before     4.0.2 allows remote attackers to conduct clickjacking attacks via a (1) FRAME or (2) IFRAME element.
     CVE-2013-0214     Cross-site request forgery (CSRF) vulnerability in the Samba Web Administration Tool (SWAT) in Samba 3.x     before 3.5.21, 3.6.x before 3.6.12, and 4.x before 4.0.2 allows remote attackers to hijack the     authentication of arbitrary users by leveraging knowledge of a password and composing requests that     perform SWAT actions.
     CVE-2013-4124     Integer overflow in the read_nttrans_ea_list function in nttrans.c in smbd in Samba 3.x before 3.5.22,     3.6.x before 3.6.17, and 4.x before 4.0.8 allows remote attackers to cause a denial of service (memory     consumption) via a malformed packet.
     CVE-2013-4408     Heap-based buffer overflow in the dcerpc_read_ncacn_packet_done function in librpc/rpc/dcerpc_util.c in     winbindd in Samba 3.x before 3.6.22, 4.0.x before 4.0.13, and 4.1.x before 4.1.3 allows remote AD domain     controllers to execute arbitrary code via an invalid fragment length in a DCE-RPC packet.
     CVE-2013-4475     Samba 3.x before 3.6.20, 4.0.x before 4.0.11, and 4.1.x before 4.1.1, when vfs_streams_depot or     vfs_streams_xattr is enabled, allows remote attackers to bypass intended file restrictions by leveraging     ACL differences between a file and an associated alternate data stream (ADS).

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Samba project reports :

Samba versions 3.2.0 and above (all versions of 3.2.x, 3.3.x, 3.4.x, 3.5.x, 3.6.x, 4.0.x and 4.1.x) do not check the underlying file or directory ACL when opening an alternate data stream.

According to the SMB1 and SMB2+ protocols the ACL on an underlying file or directory should control what access is allowed to alternate data streams that are associated with the file or directory.

Updated samba3x and samba packages that fix two security issues are now available for Red Hat Enterprise Linux 5 and 6 respectively.

The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

Samba is an open source implementation of the Server Message Block (SMB) or Common Internet File System (CIFS) protocol, which allows PC-compatible machines to share files, printers, and other information.

A heap-based buffer overflow flaw was found in the DCE-RPC client code in Samba. A specially crafted DCE-RPC packet could cause various Samba programs to crash or, possibly, execute arbitrary code when parsed. A malicious or compromised Active Directory Domain Controller could use this flaw to compromise the winbindd daemon running with root privileges. (CVE-2013-4408)

A flaw was found in the way Samba performed ACL checks on alternate file and directory data streams. An attacker able to access a CIFS share with alternate stream support enabled could access alternate data streams regardless of the underlying file or directory ACL permissions. (CVE-2013-4475)

Red Hat would like to thank the Samba project for reporting CVE-2013-4408. Upstream acknowledges Stefan Metzmacher and Michael Adam of SerNet as the original reporters of this issue.

All users of Samba are advised to upgrade to these updated packages, which contain backported patches to correct these issues. After installing this update, the smb service will be restarted automatically.

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2013:1806 advisory.

    Samba is an open-source implementation of the Server Message Block (SMB) or     Common Internet File System (CIFS) protocol, which allows PC-compatible     machines to share files, printers, and other information.

    A heap-based buffer overflow flaw was found in the DCE-RPC client code in     Samba. A specially crafted DCE-RPC packet could cause various Samba     programs to crash or, possibly, execute arbitrary code when parsed.
    A malicious or compromised Active Directory Domain Controller could use     this flaw to compromise the winbindd daemon running with root privileges.
    (CVE-2013-4408)

    A flaw was found in the way Samba performed ACL checks on alternate file     and directory data streams. An attacker able to access a CIFS share with     alternate stream support enabled could access alternate data streams     regardless of the underlying file or directory ACL permissions.
    (CVE-2013-4475)

    Red Hat would like to thank the Samba project for reporting CVE-2013-4408.
    Upstream acknowledges Stefan Metzmacher and Michael Adam of SerNet as the     original reporters of this issue.

    All users of Samba are advised to upgrade to these updated packages, which     contain backported patches to correct these issues. After installing this     update, the smb service will be restarted automatically.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

A heap-based buffer overflow flaw was found in the DCE-RPC client code in Samba. A specially crafted DCE-RPC packet could cause various Samba programs to crash or, possibly, execute arbitrary code when parsed. A malicious or compromised Active Directory Domain Controller could use this flaw to compromise the winbindd daemon running with root privileges. (CVE-2013-4408)

A flaw was found in the way Samba performed ACL checks on alternate file and directory data streams. An attacker able to access a CIFS share with alternate stream support enabled could access alternate data streams regardless of the underlying file or directory ACL permissions. (CVE-2013-4475)

After installing this update, the smb service will be restarted automatically.

Update to Samba 4.0.21. CVE-2014-3560.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Updated samba packages that fix two security issues are now available for Red Hat Storage.

The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

Samba is an open source implementation of the Server Message Block (SMB) or Common Internet File System (CIFS) protocol, which allows PC-compatible machines to share files, printers, and other information.

A heap-based buffer overflow flaw was found in the DCE-RPC client code in Samba. A specially crafted DCE-RPC packet could cause various Samba programs to crash or, possibly, execute arbitrary code when parsed. A malicious or compromised Active Directory Domain Controller could use this flaw to compromise the winbindd daemon running with root privileges. (CVE-2013-4408)

A flaw was found in the way Samba performed ACL checks on alternate file and directory data streams. An attacker able to access a CIFS share with alternate stream support enabled could access alternate data streams regardless of the underlying file or directory ACL permissions. (CVE-2013-4475)

Red Hat would like to thank the Samba project for reporting CVE-2013-4408. Upstream acknowledges Stefan Metzmacher and Michael Adam of SerNet as the original reporters of this issue.

All users of Red Hat Storage are advised to upgrade to these updated packages, which contain backported patches to correct these issues.
After installing this update, the smb service will be restarted automatically.

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_1637 advisory.

    This advisory aggregates security fixes for the samba SRPM in CIQ LTS 9.6. It addresses 97 CVEs:
    CVE-2018-1050, CVE-2020-10760, CVE-2013-4475, CVE-2020-10730, CVE-2018-16857, and 92 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_1613 advisory.

    This advisory aggregates security fixes for the samba SRPM in CIQ LTS 9.2. It addresses 88 CVEs:
    CVE-2018-1050, CVE-2020-10760, CVE-2013-4475, CVE-2020-10730, CVE-2018-16857, and 83 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
290139	MiracleLinux 4 : samba-3.6.9-167.AXS4 (AXSA:2014-033:01)	Nessus	Miracle Linux Local Security Checks	1/16/2026	1/16/2026	high
70966	FreeBSD : samba -- ACLs are not checked on opening an alternate data stream on a file or directory (a4f08579-516c-11e3-9b62-000c292e4fd8)	Nessus	FreeBSD Local Security Checks	11/20/2013	1/6/2021	medium
71274	CentOS 5 / 6 : samba / samba3x (CESA-2013:1806)	Nessus	CentOS Local Security Checks	12/10/2013	1/4/2021	high
71293	RHEL 6 : samba and samba3x (RHSA-2013:1806)	Nessus	Red Hat Local Security Checks	12/10/2013	4/15/2025	critical
71341	Scientific Linux Security Update : samba and samba3x on SL5.x, SL6.x i386/x86_64 (20131210)	Nessus	Scientific Linux Local Security Checks	12/11/2013	1/14/2021	high
77268	Fedora 19 : samba-4.0.21-1.fc19 (2014-9132)	Nessus	Fedora Local Security Checks	8/20/2014	1/11/2021	high
78991	RHEL 6 : Storage Server (RHSA-2014:0009)	Nessus	Red Hat Local Security Checks	11/8/2014	1/14/2021	high
364609	Rocky Linux 9.6 [CIQ] Security Update: ldb-tools / libldb / libldb-devel / libnetapi / libnetapi-devel / etc Multiple Vulnerabilities (ciqsa-2026_1637)	Nessus	Rocky Linux Local Security Checks	10/12/2026	10/13/2026	critical
364622	Rocky Linux 9.2 [CIQ] Security Update: ctdb / libnetapi / libnetapi-devel / libsmbclient / etc Multiple Vulnerabilities (ciqsa-2026_1613)	Nessus	Rocky Linux Local Security Checks	10/12/2026	10/13/2026	critical

Detections

Analytics

Plugins Search

high

medium

high

critical

high

high

high

critical

critical