Test Kennung:	1.3.6.1.4.1.25623.1.0.54560
Kategorie:	Gentoo Local Security Checks
Titel:	Gentoo Security Advisory GLSA 200404-21 (samba)
Zusammenfassung:	The remote host is missing updates announced in;advisory GLSA 200404-21.
Beschreibung:	Summary: The remote host is missing updates announced in advisory GLSA 200404-21. Vulnerability Insight: There is a bug in smbfs which may allow local users to gain root via a setuid file on a mounted Samba share. Also, there is a tmpfile symlink vulnerability in the smbprint script distributed with Samba. Solution: All users should update to the latest version of the Samba package. The following commands will perform the upgrade: # emerge sync # emerge -pv '>=net-fs/samba-3.0.2a-r2' # emerge '>=net-fs/samba-3.0.2a-r2' Those who are using Samba's password database also need to run the following command: # pdbedit --force-initialized-passwords Those using LDAP for Samba passwords also need to check the sambaPwdLastSet attribute on each account, and ensure it is not 0. CVSS Score: 7.8 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Copyright	Copyright (C) 2008 E-Soft Inc.

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.