Test ID:	1.3.6.1.4.1.25623.1.0.52527
Category:	FreeBSD Local Security Checks
Title:	FreeBSD Ports: samba
Summary:	The remote host is missing an update to the system; as announced in the referenced advisory.
Description:	Summary: The remote host is missing an update to the system as announced in the referenced advisory. Vulnerability Insight: The following package is affected: samba CVE-2004-0082 The mksmbpasswd shell script (mksmbpasswd.sh) in Samba 3.0.0 and 3.0.1, when creating an account but marking it as disabled, may overwrite the user password with an uninitialized buffer, which could enable the account with a more easily guessable password. Solution: Update your system with the appropriate patches or software upgrades. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2004-0082 BugTraq ID: 9637 http://www.securityfocus.com/bid/9637 Computer Incident Advisory Center Bulletin: O-078 http://www.ciac.org/ciac/bulletins/o-078.shtml http://www.osvdb.org/3919 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A827 http://www.redhat.com/support/errata/RHSA-2004-064.html XForce ISS Database: samba-mksmbpasswd-gain-access(15132) https://exchange.xforce.ibmcloud.com/vulnerabilities/15132
Copyright	Copyright (C) 2008 E-Soft Inc.

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.