Test ID:	1.3.6.1.4.1.25623.1.0.54560
Category:	Gentoo Local Security Checks
Title:	Gentoo Security Advisory GLSA 200404-21 (samba)
Summary:	The remote host is missing updates announced in;advisory GLSA 200404-21.
Description:	Summary: The remote host is missing updates announced in advisory GLSA 200404-21. Vulnerability Insight: There is a bug in smbfs which may allow local users to gain root via a setuid file on a mounted Samba share. Also, there is a tmpfile symlink vulnerability in the smbprint script distributed with Samba. Solution: All users should update to the latest version of the Samba package. The following commands will perform the upgrade: # emerge sync # emerge -pv '>=net-fs/samba-3.0.2a-r2' # emerge '>=net-fs/samba-3.0.2a-r2' Those who are using Samba's password database also need to run the following command: # pdbedit --force-initialized-passwords Those using LDAP for Samba passwords also need to check the sambaPwdLastSet attribute on each account, and ensure it is not 0. CVSS Score: 7.8 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Copyright	Copyright (C) 2008 E-Soft Inc.

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.