ID de Prueba:	1.3.6.1.4.1.25623.1.1.10.2020.0380
Categoría:	Mageia Linux Local Security Checks
Título:	Mageia: Security Advisory (MGASA-2020-0380)
Resumen:	The remote host is missing an update for the 'samba' package(s) announced via the MGASA-2020-0380 advisory.
Descripción:	Summary: The remote host is missing an update for the 'samba' package(s) announced via the MGASA-2020-0380 advisory. Vulnerability Insight: When Samba is used as a domain controller, an unauthenticated attacker on the network can gain administrator access by exploiting a netlogon protocol flaw (CVE-2020-1472). Note that Samba installations are not vulnerable unless they have the smb.conf lines 'server schannel = no' or 'server schannel = auto'. Affected Software/OS: 'samba' package(s) on Mageia 7. Solution: Please install the updated package(s). CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2020-1472 FEDORA-2020-0be2776ed3 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H4OTFBL6YDVFH2TBJFJIE4FMHPJEEJK3/ FEDORA-2020-77c15664b0 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TAPQQZZAT4TG3XVRTAFV2Y3S7OAHFBUP/ FEDORA-2020-a1d139381a https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ST6X3A2XXYMGD4INR26DQ4FP4QSM753B/ GLSA-202012-24 https://security.gentoo.org/glsa/202012-24 USN-4510-1 https://usn.ubuntu.com/4510-1/ USN-4510-2 https://usn.ubuntu.com/4510-2/ USN-4559-1 https://usn.ubuntu.com/4559-1/ VU#490028 https://www.kb.cert.org/vuls/id/490028 [debian-lts-announce] 20201123 [SECURITY] [DLA 2463-1] samba security update https://lists.debian.org/debian-lts-announce/2020/11/msg00041.html [oss-security] 20200917 Samba and CVE-2020-1472 ("Zerologon") http://www.openwall.com/lists/oss-security/2020/09/17/2 http://packetstormsecurity.com/files/159190/Zerologon-Proof-Of-Concept.html http://packetstormsecurity.com/files/160127/Zerologon-Netlogon-Privilege-Escalation.html https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1472 https://www.oracle.com/security-alerts/cpuApr2021.html https://www.synology.com/security/advisory/Synology_SA_20_21 openSUSE-SU-2020:1513 http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00080.html openSUSE-SU-2020:1526 http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00086.html
Copyright	Copyright (C) 2022 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.