Test Kennung:	1.3.6.1.4.1.25623.1.0.100803
Kategorie:	Buffer overflow
Titel:	Samba SID Parsing Remote Buffer Overflow Vulnerability
Zusammenfassung:	Samba is prone to a remote stack-based buffer-overflow vulnerability; because it fails to properly bounds-check user-supplied data before; copying it to an insufficiently sized memory buffer.
Beschreibung:	Summary: Samba is prone to a remote stack-based buffer-overflow vulnerability because it fails to properly bounds-check user-supplied data before copying it to an insufficiently sized memory buffer. Vulnerability Impact: An attacker can exploit this issue to execute arbitrary code in the context of the affected application. Failed exploit attempts will likely result in a denial of service. Affected Software/OS: Samba versions prior to 3.5.5 are vulnerable. Solution: Updates are available. Please see the references for more information. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2010-3069 1024434 http://www.securitytracker.com/id?1024434 20101207 VMSA-2010-0019 VMware ESX third party updates for Service Console http://www.securityfocus.com/archive/1/515055/100/0/threaded 41354 http://secunia.com/advisories/41354 41447 http://secunia.com/advisories/41447 42531 http://secunia.com/advisories/42531 42885 http://secunia.com/advisories/42885 43212 http://www.securityfocus.com/bid/43212 ADV-2010-2378 http://www.vupen.com/english/advisories/2010/2378 ADV-2010-3126 http://www.vupen.com/english/advisories/2010/3126 ADV-2011-0091 http://www.vupen.com/english/advisories/2011/0091 APPLE-SA-2011-03-21-1 http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html APPLE-SA-2011-06-23-1 http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html FEDORA-2010-14627 http://lists.fedoraproject.org/pipermail/package-announce/2010-September/047650.html FEDORA-2010-14678 http://lists.fedoraproject.org/pipermail/package-announce/2010-September/047697.html FEDORA-2010-14768 http://lists.fedoraproject.org/pipermail/package-announce/2010-September/047758.html HPSBUX02657 http://marc.info/?l=bugtraq&m=130835366526620&w=2 RHSA-2010:0860 http://www.redhat.com/support/errata/RHSA-2010-0860.html SSRT100460 SUSE-SR:2010:018 http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html SUSE-SR:2010:019 http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html USN-987-1 http://www.ubuntu.com/usn/USN-987-1 http://support.apple.com/kb/HT4581 http://support.apple.com/kb/HT4723 http://us1.samba.org/samba/history/samba-3.5.5.html http://us1.samba.org/samba/security/CVE-2010-3069.html http://www.vmware.com/security/advisories/VMSA-2010-0019.html samba-sidparse-bo(61773) https://exchange.xforce.ibmcloud.com/vulnerabilities/61773
Copyright	Copyright (C) 2010 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.