Test Kennung:	1.3.6.1.4.1.25623.1.1.13.2013.322.03
Kategorie:	Slackware Local Security Checks
Titel:	Slackware: Security Advisory (SSA:2013-322-03)
Zusammenfassung:	The remote host is missing an update for the 'samba' package(s) announced via the SSA:2013-322-03 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'samba' package(s) announced via the SSA:2013-322-03 advisory. Vulnerability Insight: New samba packages are available for Slackware 14.0, 14.1, and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: +--------------------------+ patches/packages/samba-4.1.1-i486-1_slack14.1.txz: Upgraded. This update fixes two security issues: * Samba versions 3.2.0 and above do not check the underlying file or directory ACL when opening an alternate data stream. * In setups which provide ldap(s) and/or https services, the private key for SSL/TLS encryption might be world readable. This typically happens in active directory domain controller setups. For more information, see: [links moved to references] (* Security fix *) Added tdb.h, tdb.pc, and a libtdb.so symlink. Thanks to Matteo Bernardini. +--------------------------+ Affected Software/OS: 'samba' package(s) on Slackware 14.0, Slackware 14.1, Slackware current. Solution: Please install the updated package(s). CVSS Score: 4.0 CVSS Vector: AV:N/AC:H/Au:N/C:P/I:P/A:N
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2013-4475 BugTraq ID: 63646 http://www.securityfocus.com/bid/63646 Debian Security Information: DSA-2812 (Google Search) http://www.debian.org/security/2013/dsa-2812 http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136864.html http://security.gentoo.org/glsa/glsa-201502-15.xml RedHat Security Advisories: RHSA-2013:1806 http://rhn.redhat.com/errata/RHSA-2013-1806.html RedHat Security Advisories: RHSA-2014:0009 http://rhn.redhat.com/errata/RHSA-2014-0009.html http://secunia.com/advisories/56508 SuSE Security Announcement: SUSE-SU-2014:0024 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2014-01/msg00002.html SuSE Security Announcement: openSUSE-SU-2013:1742 (Google Search) http://lists.opensuse.org/opensuse-updates/2013-11/msg00083.html SuSE Security Announcement: openSUSE-SU-2013:1787 (Google Search) http://lists.opensuse.org/opensuse-updates/2013-11/msg00115.html SuSE Security Announcement: openSUSE-SU-2013:1790 (Google Search) http://lists.opensuse.org/opensuse-updates/2013-11/msg00117.html SuSE Security Announcement: openSUSE-SU-2013:1921 (Google Search) http://lists.opensuse.org/opensuse-updates/2013-12/msg00088.html http://www.ubuntu.com/usn/USN-2054-1 Common Vulnerability Exposure (CVE) ID: CVE-2013-4476
Copyright	Copyright (C) 2022 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.