Test ID:	1.3.6.1.4.1.25623.1.0.64157
Category:	Ubuntu Local Security Checks
Title:	Ubuntu USN-680-1 (samba)
Summary:	Ubuntu USN-680-1 (samba)
Description:	The remote host is missing an update to samba announced via advisory USN-680-1. Details follow: It was discovered that Samba did not properly perform bounds checking in certain operations. A remote attacker could possibly exploit this to read arbitrary memory contents of the smb process, which could contain sensitive infomation or possibly have other impacts, such as a denial of service. Solution: The problem can be corrected by upgrading your system to the following package versions: Ubuntu 8.10: samba 2:3.2.3-1ubuntu3.3 In general, a standard system upgrade is sufficient to effect the necessary changes. http://www.securityspace.com/smysecure/catid.html?in=USN-680-1 Risk factor : Critical
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2008-4314 http://www.redhat.com/archives/fedora-package-announce/2008-December/msg00021.html http://www.redhat.com/archives/fedora-package-announce/2008-December/msg00141.html HPdes Security Advisory: HPSBTU02454 http://marc.info/?l=bugtraq&m=125003356619515&w=2 HPdes Security Advisory: SSRT080172 http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.453684 http://sunsolve.sun.com/search/document.do?assetkey=1-26-249087-1 SuSE Security Announcement: SUSE-SR:2008:027 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00002.html http://www.ubuntu.com/usn/USN-680-1 BugTraq ID: 32494 http://www.securityfocus.com/bid/32494 http://secunia.com/advisories/36281 http://www.vupen.com/english/advisories/2008/3277 http://www.vupen.com/english/advisories/2009/0067 http://osvdb.org/50230 http://www.securitytracker.com/id?1021287 http://secunia.com/advisories/32813 http://secunia.com/advisories/32919 http://secunia.com/advisories/32951 http://secunia.com/advisories/32968 http://www.vupen.com/english/advisories/2009/2245 Common Vulnerability Exposure (CVE) ID: CVE-2008-5187 http://www.openwall.com/lists/oss-security/2008/11/20/5 Debian Security Information: DSA-1672 (Google Search) http://www.debian.org/security/2008/dsa-1672 https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00856.html https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00858.html http://security.gentoo.org/glsa/glsa-200812-23.xml http://www.mandriva.com/security/advisories?name=MDVSA-2009:019 SuSE Security Announcement: SUSE-SR:2009:002 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00004.html http://www.ubuntu.com/usn/USN-683-1 BugTraq ID: 32371 http://www.securityfocus.com/bid/32371 http://www.vupen.com/english/advisories/2008/3212 http://osvdb.org/49970 http://secunia.com/advisories/32796 http://secunia.com/advisories/32843 http://secunia.com/advisories/32949 http://secunia.com/advisories/33323 http://secunia.com/advisories/32963 http://secunia.com/advisories/33568 Common Vulnerability Exposure (CVE) ID: CVE-2008-3137 Bugtraq: 20080703 rPSA-2008-0212-1 tshark wireshark (Google Search) http://www.securityfocus.com/archive/1/archive/1/493882/100/0/threaded Debian Security Information: DSA-1673 (Google Search) http://www.debian.org/security/2008/dsa-1673 https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00544.html http://security.gentoo.org/glsa/glsa-200808-04.xml http://www.redhat.com/support/errata/RHSA-2008-0890.html SuSE Security Announcement: SUSE-SR:2008:017 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html BugTraq ID: 30020 http://www.securityfocus.com/bid/30020 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10860 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15068 http://securitytracker.com/id?1020404 http://secunia.com/advisories/30886 http://secunia.com/advisories/30942 http://secunia.com/advisories/31085 http://www.vupen.com/english/advisories/2008/1982/references http://www.vupen.com/english/advisories/2008/2773 http://secunia.com/advisories/31378 http://secunia.com/advisories/31687 http://secunia.com/advisories/32091 http://secunia.com/advisories/32944 Common Vulnerability Exposure (CVE) ID: CVE-2008-3138 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10536 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14898 XForce ISS Database: wireshark-pana-kismet-dos(43519) http://xforce.iss.net/xforce/xfdb/43519 Common Vulnerability Exposure (CVE) ID: CVE-2008-3141 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11324 XForce ISS Database: wireshark-rmi-information-disclosure(43520) http://xforce.iss.net/xforce/xfdb/43520 Common Vulnerability Exposure (CVE) ID: CVE-2008-3145 Bugtraq: 20080729 rPSA-2008-0237-1 tshark wireshark (Google Search) http://www.securityfocus.com/archive/1/archive/1/494859/100/0/threaded http://www.mandriva.com/security/advisories?name=MDVSA-2008:152 BugTraq ID: 30181 http://www.securityfocus.com/bid/30181 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9020 http://www.vupen.com/english/advisories/2008/2057/references http://securitytracker.com/id?1020471 http://secunia.com/advisories/31044 http://secunia.com/advisories/31257 XForce ISS Database: wireshark-packets-dos(43719) http://xforce.iss.net/xforce/xfdb/43719 Common Vulnerability Exposure (CVE) ID: CVE-2008-3933 Bugtraq: 20080917 rPSA-2008-0278-1 tshark wireshark (Google Search) http://www.securityfocus.com/archive/1/archive/1/496487/100/0/threaded https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2682 https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00715.html https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00713.html http://security.gentoo.org/glsa/glsa-200809-17.xml http://www.mandriva.com/security/advisories?name=MDVSA-2008:199 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9620 http://www.securitytracker.com/id?1020819 http://secunia.com/advisories/31886 http://secunia.com/advisories/32028 http://secunia.com/advisories/31864 http://www.vupen.com/english/advisories/2008/2493 Common Vulnerability Exposure (CVE) ID: CVE-2008-4683 Bugtraq: 20081211 rPSA-2008-0336-1 tshark wireshark (Google Search) http://www.securityfocus.com/archive/1/archive/1/499154/100/0/threaded http://www.mandriva.com/security/advisories?name=MDVSA-2008:215 http://www.redhat.com/support/errata/RHSA-2009-0313.html BugTraq ID: 31838 http://www.securityfocus.com/bid/31838 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9821 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14982 http://secunia.com/advisories/34144 http://www.vupen.com/english/advisories/2008/2872 http://securitytracker.com/id?1021069 http://secunia.com/advisories/32355 Common Vulnerability Exposure (CVE) ID: CVE-2008-4684 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10223 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14767 Common Vulnerability Exposure (CVE) ID: CVE-2008-4685 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10788 Common Vulnerability Exposure (CVE) ID: CVE-2008-5139 http://lists.debian.org/debian-devel/2008/08/msg00285.html Debian Security Information: DSA-1674 (Google Search) http://www.debian.org/security/2008/dsa-1674 BugTraq ID: 32413 http://www.securityfocus.com/bid/32413 http://secunia.com/advisories/32943 http://secunia.com/advisories/32959 Common Vulnerability Exposure (CVE) ID: CVE-2008-4326 http://www.openwall.com/lists/oss-security/2008/09/22/2 Debian Security Information: DSA-1675 (Google Search) http://www.debian.org/security/2008/dsa-1675 SuSE Security Announcement: SUSE-SR:2009:003 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html http://jvn.jp/en/jp/JVN54824688/index.html http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000061.html http://osvdb.org/48511 http://secunia.com/advisories/31974 http://secunia.com/advisories/31992 http://www.vupen.com/english/advisories/2008/2657 http://secunia.com/advisories/32954 http://secunia.com/advisories/33822 Common Vulnerability Exposure (CVE) ID: CVE-2008-5276 Bugtraq: 20081130 [TKADV2008-013] VLC media player RealMedia Processing Integer Overflow Vulnerability (Google Search) http://www.securityfocus.com/archive/1/archive/1/498768/100/0/threaded http://www.trapkit.de/advisories/TKADV2008-013.txt http://security.gentoo.org/glsa/glsa-200812-24.xml BugTraq ID: 32545 http://www.securityfocus.com/bid/32545 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14793 http://www.vupen.com/english/advisories/2008/3287 http://www.osvdb.org/50333 http://secunia.com/advisories/32942 http://secunia.com/advisories/33315 http://securityreason.com/securityalert/4680 Common Vulnerability Exposure (CVE) ID: CVE-2008-1096 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=414370 https://bugzilla.redhat.com/show_bug.cgi?id=286411 Debian Security Information: DSA-1858 (Google Search) http://www.debian.org/security/2009/dsa-1858 http://www.mandriva.com/security/advisories?name=MDVSA-2008:099 http://www.redhat.com/support/errata/RHSA-2008-0145.html SuSE Security Announcement: SUSE-SR:2008:014 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00001.html http://www.ubuntu.com/usn/USN-681-1 BugTraq ID: 28821 http://www.securityfocus.com/bid/28821 http://osvdb.org/43212 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10843 http://www.securitytracker.com/id?1019880 http://secunia.com/advisories/29786 http://secunia.com/advisories/30967 http://secunia.com/advisories/32945 http://secunia.com/advisories/36260 XForce ISS Database: imagemagick-loadtile-code-execution(41194) http://xforce.iss.net/xforce/xfdb/41194 Common Vulnerability Exposure (CVE) ID: CVE-2008-1419 Debian Security Information: DSA-1591 (Google Search) http://www.debian.org/security/2008/dsa-1591 https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00247.html https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00256.html https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00243.html http://security.gentoo.org/glsa/glsa-200806-09.xml http://www.mandriva.com/security/advisories?name=MDVSA-2008:102 http://www.redhat.com/support/errata/RHSA-2008-0270.html http://www.redhat.com/support/errata/RHSA-2008-0271.html SuSE Security Announcement: SUSE-SR:2008:012 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00001.html http://www.ubuntu.com/usn/USN-682-1 BugTraq ID: 29206 http://www.securityfocus.com/bid/29206 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10104 http://secunia.com/advisories/32946 http://www.vupen.com/english/advisories/2008/1510/references http://www.securitytracker.com/id?1020029 http://secunia.com/advisories/30234 http://secunia.com/advisories/30237 http://secunia.com/advisories/30247 http://secunia.com/advisories/30259 http://secunia.com/advisories/30479 http://secunia.com/advisories/30581 http://secunia.com/advisories/30820 XForce ISS Database: libvorbis-ogg-bo(42397) http://xforce.iss.net/xforce/xfdb/42397 XForce ISS Database: libvorbis-ogg-dos(42400) http://xforce.iss.net/xforce/xfdb/42400 Common Vulnerability Exposure (CVE) ID: CVE-2008-1420 http://www.ubuntulinux.org/support/documentation/usn/usn-825-1 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9500 http://secunia.com/advisories/36463 XForce ISS Database: libvorbis-residue-bo(42402) http://xforce.iss.net/xforce/xfdb/42402 Common Vulnerability Exposure (CVE) ID: CVE-2008-1423 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9851 XForce ISS Database: libvorbis-quantvals-quantlist-bo(42403) http://xforce.iss.net/xforce/xfdb/42403 Common Vulnerability Exposure (CVE) ID: CVE-2008-5141 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=506350 Debian Security Information: DSA-1676 (Google Search) http://www.debian.org/security/2008/dsa-1676 BugTraq ID: 32386 http://www.securityfocus.com/bid/32386 http://secunia.com/advisories/32891 http://secunia.com/advisories/32961 XForce ISS Database: flamethrower-flamethrower-symlink(46717) http://xforce.iss.net/xforce/xfdb/46717 Common Vulnerability Exposure (CVE) ID: CVE-2008-5286 http://www.openwall.com/lists/oss-security/2008/12/01/1 Debian Security Information: DSA-1677 (Google Search) http://www.debian.org/security/2008/dsa-1677 http://www.gentoo.org/security/en/glsa/glsa-200812-11.xml http://www.gentoo.org/security/en/glsa/glsa-200812-01.xml http://www.mandriva.com/security/advisories?name=MDVSA-2009:028 http://www.mandriva.com/security/advisories?name=MDVSA-2009:029 http://www.redhat.com/support/errata/RHSA-2008-1028.html BugTraq ID: 32518 http://www.securityfocus.com/bid/32518 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10058 http://www.securitytracker.com/id?1021298 http://secunia.com/advisories/33111 http://www.vupen.com/english/advisories/2008/3315 http://secunia.com/advisories/33101 http://secunia.com/advisories/32962 XForce ISS Database: cups-cupsimagereadpng-overflow(46933) http://xforce.iss.net/xforce/xfdb/46933 Common Vulnerability Exposure (CVE) ID: CVE-2008-4917 Bugtraq: 20081203 Re: VMSA-2008-0019 VMware Hosted products and patches for ESX and ESXi resolve a critical security issue and update bzip2 (Google Search) http://www.securityfocus.com/archive/1/archive/1/498886/100/0/threaded Bugtraq: 20081203 VMSA-2008-0019 VMware Hosted products and patches for ESX and ESXi resolve a critical security issue and update bzip2 (Google Search) http://www.securityfocus.com/archive/1/archive/1/498863/100/0/threaded http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:6246 http://securitytracker.com/id?1021300 http://securitytracker.com/id?1021301 http://secunia.com/advisories/32965 Common Vulnerability Exposure (CVE) ID: CVE-2008-1372 Bugtraq: 20080321 rPSA-2008-0118-1 bzip2 (Google Search) http://www.securityfocus.com/archive/1/archive/1/489968/100/0/threaded http://www.cert.fi/haavoittuvuudet/joint-advisory-archive-formats.html http://www.ee.oulu.fi/research/ouspg/protos/testing/c10/archive/ http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00165.html https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00225.html http://www.gentoo.org/security/en/glsa/glsa-200804-02.xml http://security.gentoo.org/glsa/glsa-200903-40.xml http://www.mandriva.com/security/advisories?name=MDVSA-2008:075 NETBSD Security Advisory: NetBSD-SA2008-004 ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-004.txt.asc http://www.redhat.com/support/errata/RHSA-2008-0893.html http://www.slackware.org/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.473263 http://sunsolve.sun.com/search/document.do?assetkey=1-26-241786-1 SuSE Security Announcement: SUSE-SR:2008:011 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-05/msg00000.html http://www.ubuntulinux.org/support/documentation/usn/usn-590-1 Cert/CC Advisory: TA09-218A http://www.us-cert.gov/cas/techalerts/TA09-218A.html CERT/CC vulnerability note: VU#813451 http://www.kb.cert.org/vuls/id/813451 BugTraq ID: 28286 http://www.securityfocus.com/bid/28286 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10067 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:6467 http://secunia.com/advisories/29497 http://secunia.com/advisories/36096 http://www.vupen.com/english/advisories/2008/0915 http://www.vupen.com/english/advisories/2008/2557 http://www.securitytracker.com/id?1020867 http://secunia.com/advisories/29475 http://secunia.com/advisories/29410 http://secunia.com/advisories/29506 http://secunia.com/advisories/29677 http://secunia.com/advisories/29698 http://secunia.com/advisories/29656 http://secunia.com/advisories/29940 http://secunia.com/advisories/31204 http://secunia.com/advisories/31869 http://secunia.com/advisories/31878 http://www.vupen.com/english/advisories/2009/2172 XForce ISS Database: bzip2-archives-code-execution(41249) http://xforce.iss.net/xforce/xfdb/41249 Common Vulnerability Exposure (CVE) ID: CVE-2008-5302 Bugtraq: 20090120 rPSA-2009-0011-1 perl (Google Search) http://www.securityfocus.com/archive/1/archive/1/500210/100/0/threaded http://www.openwall.com/lists/oss-security/2008/11/28/2 http://www.gossamer-threads.com/lists/perl/porters/233695#233695 http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html Debian Security Information: DSA-1678 (Google Search) http://www.debian.org/security/2008/dsa-1678 http://www.mandriva.com/security/advisories?name=MDVSA-2010:116 http://www.redhat.com/support/errata/RHSA-2010-0458.html SuSE Security Announcement: SUSE-SR:2009:004 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html http://www.ubuntu.com/usn/usn-700-1 http://www.ubuntu.com/usn/usn-700-2 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11076 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:6890 http://secunia.com/advisories/33314 http://secunia.com/advisories/32980 http://secunia.com/advisories/40052 XForce ISS Database: perl-filepath-symlink(47043) http://xforce.iss.net/xforce/xfdb/47043 Common Vulnerability Exposure (CVE) ID: CVE-2008-5303 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9699 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:6680 XForce ISS Database: filepath-rmtree-symlink(47044) http://xforce.iss.net/xforce/xfdb/47044 Common Vulnerability Exposure (CVE) ID: CVE-2005-0448 Conectiva Linux advisory: CLSA-2006:1056 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=001056 Debian Security Information: DSA-696 (Google Search) http://www.debian.org/security/2005/dsa-696 http://fedoranews.org/updates/FEDORA--.shtml http://www.gentoo.org/security/en/glsa/glsa-200501-38.xml HPdes Security Advisory: HPSBUX01208 http://www.securityfocus.com/advisories/8704 HPdes Security Advisory: SSRT5938 http://www.mandriva.com/security/advisories?name=MDKSA-2005:079 http://www.redhat.com/support/errata/RHSA-2005-881.html http://www.redhat.com/support/errata/RHSA-2005-674.html SGI Security Advisory: 20060101-01-U ftp://patches.sgi.com/support/free/security/advisories/20060101-01-U http://www.ubuntulinux.org/support/documentation/usn/usn-94-1 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:728 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10475 http://secunia.com/advisories/18075 BugTraq ID: 12767 http://www.securityfocus.com/bid/12767 http://secunia.com/advisories/14531 http://secunia.com/advisories/18517 http://secunia.com/advisories/17079 Common Vulnerability Exposure (CVE) ID: CVE-2004-0452 Debian Security Information: DSA-620 (Google Search) http://www.debian.org/security/2004/dsa-620 http://www.redhat.com/support/errata/RHSA-2005-103.html http://www.redhat.com/support/errata/RHSA-2005-105.html http://marc.free.net.ph/message/20041221.102713.5d5e603a.html Bugtraq: 20050111 [OpenPKG-SA-2005.001] OpenPKG Security Advisory (perl) (Google Search) http://marc.theaimsgroup.com/?l=bugtraq&m=110547693019788&w=2 BugTraq ID: 12072 http://www.securityfocus.com/bid/12072 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9938 http://secunia.com/advisories/12991 XForce ISS Database: perl-filepathrmtree-insecure-permissions(18650) http://xforce.iss.net/xforce/xfdb/18650
Copyright	Copyright (c) 2009 E-Soft Inc. http://www.securityspace.com

This is only one of 32582 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.

New User Registration Email: UserID: Passwd: Please email me your monthly newsletters, informing the latest services, improvements & surveys. Please email me a vulnerability test announcement whenever a new test is added.     Privacy

Registered User Login   UserID:     Passwd:     Forgot userid or passwd? Email/Userid: