Anfälligkeitssuche        Suche in 324607 CVE Beschreibungen
und 145615 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.63101
Kategorie:Slackware Local Security Checks
Titel:Slackware: Security Advisory (SSA:2009-005-01)
Zusammenfassung:The remote host is missing an update for the 'samba' package(s) announced via the SSA:2009-005-01 advisory.
Beschreibung:Summary:
The remote host is missing an update for the 'samba' package(s) announced via the SSA:2009-005-01 advisory.

Vulnerability Insight:
New samba packages are available for Slackware 12.2 and -current to fix a
security issue.

More details about this issue may be found in the Common
Vulnerabilities and Exposures (CVE) database:

[link moved to references]


Here are the details from the Slackware 12.2 ChangeLog:
+--------------------------+
patches/packages/samba-3.2.7-i486-1_slack12.2.tgz:
Upgraded to samba-3.2.7.
This fixes a security issue. From the WHATSNEW.txt file:
'This is a security release in order to address CVE-2009-0022.
o CVE-2009-0022
In Samba 3.2.0 to 3.2.6, in setups with registry shares enabled,
access to the root filesystem ('/') is granted
when connecting to a share called '' (empty string)
using old versions of smbclient (before 3.0.28).
The original security announcement for this and past advisories can
be found [link moved to references]'
For more information, see:
[link moved to references]
(* Security fix *)
+--------------------------+

Affected Software/OS:
'samba' package(s) on Slackware 12.2, Slackware current.

Solution:
Please install the updated package(s).

CVSS Score:
6.3

CVSS Vector:
AV:N/AC:M/Au:S/C:C/I:N/A:N

Querverweis: Common Vulnerability Exposure (CVE) ID: CVE-2009-0022
1021513
http://www.securitytracker.com/id?1021513
33118
http://www.securityfocus.com/bid/33118
33379
http://secunia.com/advisories/33379
33392
http://secunia.com/advisories/33392
33431
http://secunia.com/advisories/33431
51152
http://osvdb.org/51152
ADV-2009-0017
http://www.vupen.com/english/advisories/2009/0017
FEDORA-2009-0268
https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00309.html
MDVSA-2009:042
http://www.mandriva.com/security/advisories?name=MDVSA-2009:042
USN-702-1
https://usn.ubuntu.com/702-1/
http://master.samba.org/samba/ftp/patches/security/samba-3.2.6-CVE-2009-0022.patch
http://www.samba.org/samba/security/CVE-2009-0022.html
samba-file-system-security-bypass(47733)
https://exchange.xforce.ibmcloud.com/vulnerabilities/47733
CopyrightCopyright (C) 2012 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2025 E-Soft Inc. Alle Rechte vorbehalten.