Test ID:	1.3.6.1.4.1.25623.1.0.842679
Category:	Ubuntu Local Security Checks
Title:	Ubuntu: Security Advisory (USN-2922-1)
Summary:	The remote host is missing an update for the 'samba' package(s) announced via the USN-2922-1 advisory.
Description:	Summary: The remote host is missing an update for the 'samba' package(s) announced via the USN-2922-1 advisory. Vulnerability Insight: Jeremy Allison discovered that Samba incorrectly handled ACLs on symlink paths. A remote attacker could use this issue to overwrite the ownership of ACLs using symlinks. (CVE-2015-7560) Garming Sam and Douglas Bagnall discovered that the Samba internal DNS server incorrectly handled certain DNS TXT records. A remote attacker could use this issue to cause Samba to crash, resulting in a denial of service, or possibly obtain uninitialized memory contents. This issue only applied to Ubuntu 14.04 LTS and Ubuntu 15.10. (CVE-2016-0771) It was discovered that the Samba Web Administration Tool (SWAT) was vulnerable to clickjacking and cross-site request forgery attacks. This issue only affected Ubuntu 12.04 LTS. (CVE-2013-0213, CVE-2013-0214) Affected Software/OS: 'samba' package(s) on Ubuntu 12.04, Ubuntu 14.04, Ubuntu 15.10. Solution: Please install the updated package(s). CVSS Score: 5.1 CVSS Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2013-0213 BugTraq ID: 57631 http://www.securityfocus.com/bid/57631 Debian Security Information: DSA-2617 (Google Search) http://www.debian.org/security/2013/dsa-2617 RedHat Security Advisories: RHSA-2013:1310 http://rhn.redhat.com/errata/RHSA-2013-1310.html RedHat Security Advisories: RHSA-2013:1542 http://rhn.redhat.com/errata/RHSA-2013-1542.html RedHat Security Advisories: RHSA-2014:0305 http://rhn.redhat.com/errata/RHSA-2014-0305.html SuSE Security Announcement: SUSE-SU-2013:0326 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00019.html SuSE Security Announcement: SUSE-SU-2013:0519 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00042.html SuSE Security Announcement: openSUSE-SU-2013:0277 (Google Search) http://lists.opensuse.org/opensuse-updates/2013-02/msg00029.html SuSE Security Announcement: openSUSE-SU-2013:0281 (Google Search) http://lists.opensuse.org/opensuse-updates/2013-02/msg00033.html http://www.ubuntu.com/usn/USN-2922-1 Common Vulnerability Exposure (CVE) ID: CVE-2013-0214 http://osvdb.org/89627 Common Vulnerability Exposure (CVE) ID: CVE-2015-7560 BugTraq ID: 84267 http://www.securityfocus.com/bid/84267 Debian Security Information: DSA-3514 (Google Search) http://www.debian.org/security/2016/dsa-3514 http://lists.fedoraproject.org/pipermail/package-announce/2016-March/180000.html http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178764.html http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178730.html http://www.securitytracker.com/id/1035220 SuSE Security Announcement: SUSE-SU-2016:0814 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00064.html SuSE Security Announcement: SUSE-SU-2016:0816 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00065.html SuSE Security Announcement: SUSE-SU-2016:0837 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00081.html SuSE Security Announcement: SUSE-SU-2016:0905 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00092.html SuSE Security Announcement: openSUSE-SU-2016:0813 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00063.html SuSE Security Announcement: openSUSE-SU-2016:0877 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00090.html SuSE Security Announcement: openSUSE-SU-2016:1064 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html SuSE Security Announcement: openSUSE-SU-2016:1106 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html SuSE Security Announcement: openSUSE-SU-2016:1107 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html Common Vulnerability Exposure (CVE) ID: CVE-2016-0771 1035219 http://www.securitytracker.com/id/1035219 84273 http://www.securityfocus.com/bid/84273 DSA-3514 USN-2922-1 https://bugzilla.samba.org/show_bug.cgi?id=11128 https://bugzilla.samba.org/show_bug.cgi?id=11686 https://www.samba.org/samba/security/CVE-2016-0771.html openSUSE-SU-2016:0813
Copyright	Copyright (C) 2016 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.