Test ID:	1.3.6.1.4.1.25623.1.0.703740
Category:	Debian Local Security Checks
Title:	Debian: Security Advisory (DSA-3740-1)
Summary:	The remote host is missing an update for the Debian 'samba' package(s) announced via the DSA-3740-1 advisory.
Description:	Summary: The remote host is missing an update for the Debian 'samba' package(s) announced via the DSA-3740-1 advisory. Vulnerability Insight: Several vulnerabilities have been discovered in Samba, a SMB/CIFS file, print, and login server for Unix. The Common Vulnerabilities and Exposures project identifies the following issues: CVE-2016-2119 Stefan Metzmacher discovered that client-side SMB2/3 required signing can be downgraded, allowing a man-in-the-middle attacker to impersonate a server being connected to by Samba, and return malicious results. CVE-2016-2123 Trend Micro's Zero Day Initiative and Frederic Besler discovered that the routine ndr_pull_dnsp_name, used to parse data from the Samba Active Directory ldb database, contains an integer overflow flaw, leading to an attacker-controlled memory overwrite. An authenticated user can take advantage of this flaw for remote privilege escalation. CVE-2016-2125 Simo Sorce of Red Hat discovered that the Samba client code always requests a forwardable ticket when using Kerberos authentication. A target server, which must be in the current or trusted domain/realm, is given a valid general purpose Kerberos Ticket Granting Ticket (TGT), which can be used to fully impersonate the authenticated user or service. CVE-2016-2126 Volker Lendecke discovered several flaws in the Kerberos PAC validation. A remote, authenticated, attacker can cause the winbindd process to crash using a legitimate Kerberos ticket due to incorrect handling of the PAC checksum. A local service with access to the winbindd privileged pipe can cause winbindd to cache elevated access permissions. For the stable distribution (jessie), these problems have been fixed in version 2:4.2.14+dfsg-0+deb8u2. In addition, this update contains several changes originally targeted for the upcoming jessie point release. We recommend that you upgrade your samba packages. Affected Software/OS: 'samba' package(s) on Debian 8. Solution: Please install the updated package(s). CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-2119 BugTraq ID: 91700 http://www.securityfocus.com/bid/91700 https://security.gentoo.org/glsa/201805-07 RedHat Security Advisories: RHSA-2016:1486 http://rhn.redhat.com/errata/RHSA-2016-1486.html RedHat Security Advisories: RHSA-2016:1487 http://rhn.redhat.com/errata/RHSA-2016-1487.html RedHat Security Advisories: RHSA-2016:1494 http://rhn.redhat.com/errata/RHSA-2016-1494.html http://www.securitytracker.com/id/1036244 SuSE Security Announcement: openSUSE-SU-2016:1830 (Google Search) http://lists.opensuse.org/opensuse-updates/2016-07/msg00060.html Common Vulnerability Exposure (CVE) ID: CVE-2016-2123 1037493 http://www.securitytracker.com/id/1037493 94970 http://www.securityfocus.com/bid/94970 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-2123 https://www.samba.org/samba/security/CVE-2016-2123.html Common Vulnerability Exposure (CVE) ID: CVE-2016-2125 BugTraq ID: 94988 http://www.securityfocus.com/bid/94988 RedHat Security Advisories: RHSA-2017:0494 http://rhn.redhat.com/errata/RHSA-2017-0494.html RedHat Security Advisories: RHSA-2017:0495 http://rhn.redhat.com/errata/RHSA-2017-0495.html RedHat Security Advisories: RHSA-2017:0662 http://rhn.redhat.com/errata/RHSA-2017-0662.html RedHat Security Advisories: RHSA-2017:0744 http://rhn.redhat.com/errata/RHSA-2017-0744.html RedHat Security Advisories: RHSA-2017:1265 https://access.redhat.com/errata/RHSA-2017:1265 http://www.securitytracker.com/id/1037494 Common Vulnerability Exposure (CVE) ID: CVE-2016-2126 BugTraq ID: 94994 http://www.securityfocus.com/bid/94994 http://www.securitytracker.com/id/1037495
Copyright	Copyright (C) 2016 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.