Test ID:	1.3.6.1.4.1.25623.1.0.50406
Category:	Fedora Local Security Checks
Title:	Fedora Core 2 FEDORA-2004-305 (samba)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to samba announced via advisory FEDORA-2004-305. This update corrects two Denial-of-Service attacks against Samba-3.0.6. This update may also fix other problems some people experienced with Samba-3.0.6. * Mon Sep 13 2004 Jay Fenlason 3.0.7-2.FC2 - Upgrade to 3.0.7 to close CVE-2004-0807 and CVE-2004-0808 This obsoletes the 3.0.6-schema patch This update can be downloaded from: http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/ 61069685cc423f62d9a54bb2d95e267b SRPMS/samba-3.0.7-2.FC2.src.rpm 51d78f4c6c66dfd3ecf44735e17a0983 x86_64/samba-3.0.7-2.FC2.x86_64.rpm 10f92c274c213528d611bc9433942f50 x86_64/samba-client-3.0.7-2.FC2.x86_64.rpm 826765f1dd69ebb9c309bfed5af574d6 x86_64/samba-common-3.0.7-2.FC2.x86_64.rpm 77417c565740f526acfd105e5efb0e4b x86_64/samba-swat-3.0.7-2.FC2.x86_64.rpm a0d8c7b1105306ff0cad72dbe924f688 x86_64/debug/samba-debuginfo-3.0.7-2.FC2.x86_64.rpm b21fd9ddd2a3375a2db242f17e46020f i386/samba-3.0.7-2.FC2.i386.rpm baa3b958f91fa31794e5945281526252 i386/samba-client-3.0.7-2.FC2.i386.rpm 4738750072856c0e7ae6329d5632b6ba i386/samba-common-3.0.7-2.FC2.i386.rpm abde417fc55e40b37c19d1089aa59e6f i386/samba-swat-3.0.7-2.FC2.i386.rpm 8e78f2b1df0a73d250a662eaec5241c1 i386/debug/samba-debuginfo-3.0.7-2.FC2.i386.rpm This update can also be installed with the Update Agent you can launch the Update Agent with the 'up2date' command. Solution: Apply the appropriate updates. http://www.fedoranews.org/updates/FEDORA-2004-305.shtml Risk factor : Medium CVSS Score: 5.0
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2004-0807 Bugtraq: 20040913 Samba 3.0 DoS Vulberabilities (CAN-2004-0807 & CAN-2004-0808) (Google Search) http://marc.info/?l=bugtraq&m=109509335230495&w=2 Bugtraq: 20040915 [OpenPKG-SA-2004.040] OpenPKG Security Advisory (samba) (Google Search) http://marc.info/?l=bugtraq&m=109526231623307&w=2 Conectiva Linux advisory: CLA-2004:873 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000873 http://www.gentoo.org/security/en/glsa/glsa-200409-16.xml http://www.idefense.com/application/poi/display?id=139&type=vulnerabilities http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:092 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11141 http://www.redhat.com/support/errata/RHSA-2004-467.html SGI Security Advisory: 20041201-01-P ftp://patches.sgi.com/support/free/security/advisories/20041201-01-P http://www.trustix.net/errata/2004/0046/ Common Vulnerability Exposure (CVE) ID: CVE-2004-0808 http://www.idefense.com/application/poi/display?id=138&type=vulnerabilities https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10344
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.