Test Kennung:	1.3.6.1.4.1.25623.1.1.13.2016.106.02
Kategorie:	Slackware Local Security Checks
Titel:	Slackware: Security Advisory (SSA:2016-106-02)
Zusammenfassung:	The remote host is missing an update for the 'samba' package(s) announced via the SSA:2016-106-02 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'samba' package(s) announced via the SSA:2016-106-02 advisory. Vulnerability Insight: New samba packages are available for Slackware 14.0, 14.1, and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: +--------------------------+ patches/packages/samba-4.2.11-i486-1_slack14.1.txz: Upgraded. This update fixes the security issues known as 'badlock' (or 'sadlock'), which may allow man-in-the-middle or denial-of-service attacks: CVE-2015-5370 (Multiple errors in DCE-RPC code) CVE-2016-2110 (Man in the middle attacks possible with NTLMSSP) CVE-2016-2111 (NETLOGON Spoofing Vulnerability) CVE-2016-2112 (LDAP client and server don't enforce integrity) CVE-2016-2113 (Missing TLS certificate validation) CVE-2016-2114 ('server signing = mandatory' not enforced) CVE-2016-2115 (SMB IPC traffic is not integrity protected) CVE-2016-2118 (SAMR and LSA man in the middle attacks possible) For more information, see: [links moved to references] (* Security fix *) +--------------------------+ Affected Software/OS: 'samba' package(s) on Slackware 14.0, Slackware 14.1, Slackware current. Solution: Please install the updated package(s). CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2015-5370 Debian Security Information: DSA-3548 (Google Search) http://www.debian.org/security/2016/dsa-3548 http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182288.html http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182272.html http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182185.html http://badlock.org/ RedHat Security Advisories: RHSA-2016:0611 http://rhn.redhat.com/errata/RHSA-2016-0611.html RedHat Security Advisories: RHSA-2016:0612 http://rhn.redhat.com/errata/RHSA-2016-0612.html RedHat Security Advisories: RHSA-2016:0613 http://rhn.redhat.com/errata/RHSA-2016-0613.html RedHat Security Advisories: RHSA-2016:0614 http://rhn.redhat.com/errata/RHSA-2016-0614.html RedHat Security Advisories: RHSA-2016:0618 http://rhn.redhat.com/errata/RHSA-2016-0618.html RedHat Security Advisories: RHSA-2016:0619 http://rhn.redhat.com/errata/RHSA-2016-0619.html RedHat Security Advisories: RHSA-2016:0620 http://rhn.redhat.com/errata/RHSA-2016-0620.html RedHat Security Advisories: RHSA-2016:0624 http://rhn.redhat.com/errata/RHSA-2016-0624.html http://www.securitytracker.com/id/1035533 http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.458012 SuSE Security Announcement: SUSE-SU-2016:1022 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00020.html SuSE Security Announcement: SUSE-SU-2016:1023 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00021.html SuSE Security Announcement: SUSE-SU-2016:1024 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00022.html SuSE Security Announcement: SUSE-SU-2016:1028 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00024.html SuSE Security Announcement: openSUSE-SU-2016:1025 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00023.html SuSE Security Announcement: openSUSE-SU-2016:1064 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html SuSE Security Announcement: openSUSE-SU-2016:1106 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html SuSE Security Announcement: openSUSE-SU-2016:1107 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html http://www.ubuntu.com/usn/USN-2950-1 http://www.ubuntu.com/usn/USN-2950-2 http://www.ubuntu.com/usn/USN-2950-3 http://www.ubuntu.com/usn/USN-2950-4 http://www.ubuntu.com/usn/USN-2950-5 Common Vulnerability Exposure (CVE) ID: CVE-2016-2110 https://security.gentoo.org/glsa/201612-47 RedHat Security Advisories: RHSA-2016:0621 http://rhn.redhat.com/errata/RHSA-2016-0621.html RedHat Security Advisories: RHSA-2016:0623 http://rhn.redhat.com/errata/RHSA-2016-0623.html RedHat Security Advisories: RHSA-2016:0625 http://rhn.redhat.com/errata/RHSA-2016-0625.html SuSE Security Announcement: SUSE-SU-2016:1105 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00046.html SuSE Security Announcement: openSUSE-SU-2016:1440 (Google Search) http://lists.opensuse.org/opensuse-updates/2016-05/msg00124.html Common Vulnerability Exposure (CVE) ID: CVE-2016-2111 Common Vulnerability Exposure (CVE) ID: CVE-2016-2112 Common Vulnerability Exposure (CVE) ID: CVE-2016-2113 Common Vulnerability Exposure (CVE) ID: CVE-2016-2114 BugTraq ID: 86011 http://www.securityfocus.com/bid/86011 Common Vulnerability Exposure (CVE) ID: CVE-2016-2115 Common Vulnerability Exposure (CVE) ID: CVE-2016-2118 BugTraq ID: 86002 http://www.securityfocus.com/bid/86002 CERT/CC vulnerability note: VU#813296 https://www.kb.cert.org/vuls/id/813296
Copyright	Copyright (C) 2022 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.