ID de Prueba:	1.3.6.1.4.1.25623.1.1.10.2013.0369
Categoría:	Mageia Linux Local Security Checks
Título:	Mageia: Security Advisory (MGASA-2013-0369)
Resumen:	The remote host is missing an update for the 'samba' package(s) announced via the MGASA-2013-0369 advisory.
Descripción:	Summary: The remote host is missing an update for the 'samba' package(s) announced via the MGASA-2013-0369 advisory. Vulnerability Insight: Updated samba packages fix security vulnerabilities: Samba before 3.6.22 incorrectly allows login from authenticated users if the require_membership_of parameter of pam_winbind specifies only invalid group names (CVE-2012-6150). It was discovered that multiple buffer overflows in the processing of DCE-RPC packets may lead to the execution of arbitrary code (CVE-2013-4408). Affected Software/OS: 'samba' package(s) on Mageia 3. Solution: Please install the updated package(s). CVSS Score: 8.3 CVSS Vector: AV:A/AC:L/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2012-6150 FEDORA-2014-7672 http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134717.html FEDORA-2014-9132 http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136864.html GLSA-201502-15 http://security.gentoo.org/glsa/glsa-201502-15.xml HPSBUX03087 http://marc.info/?l=bugtraq&m=141660010015249&w=2 MDVSA-2013:299 http://www.mandriva.com/security/advisories?name=MDVSA-2013:299 RHSA-2014:0330 http://rhn.redhat.com/errata/RHSA-2014-0330.html SSRT101413 SUSE-SU-2014:0024 http://lists.opensuse.org/opensuse-security-announce/2014-01/msg00002.html USN-2054-1 http://www.ubuntu.com/usn/USN-2054-1 [oss-security] 20131202 Re: CVE request: samba pam_winbind authentication fails open http://openwall.com/lists/oss-security/2013/12/03/5 [samba-technical] 20120612 winbind pam security problem https://lists.samba.org/archive/samba-technical/2012-June/084593.html [samba-technical] 20131128 fail authentication if user isn't member of *any* require_membership_of specified groups https://lists.samba.org/archive/samba-technical/2013-November/096411.html https://bugzilla.redhat.com/show_bug.cgi?id=1036897 https://bugzilla.samba.org/show_bug.cgi?id=10300 openSUSE-SU-2013:1921 http://lists.opensuse.org/opensuse-updates/2013-12/msg00088.html openSUSE-SU-2014:0405 http://lists.opensuse.org/opensuse-updates/2014-03/msg00063.html openSUSE-SU-2016:1106 http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html openSUSE-SU-2016:1107 http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html Common Vulnerability Exposure (CVE) ID: CVE-2013-4408 64191 http://www.securityfocus.com/bid/64191 DSA-2812 http://www.debian.org/security/2013/dsa-2812 RHSA-2013:1805 http://rhn.redhat.com/errata/RHSA-2013-1805.html RHSA-2013:1806 http://rhn.redhat.com/errata/RHSA-2013-1806.html RHSA-2014:0009 http://rhn.redhat.com/errata/RHSA-2014-0009.html http://www.samba.org/samba/ftp/patches/security/samba-4.1.2-CVE-2013-4408-CVE-2012-6150.patch http://www.samba.org/samba/security/CVE-2013-4408
Copyright	Copyright (C) 2022 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.