Test ID:	1.3.6.1.4.1.25623.1.0.851559
Category:	SuSE Local Security Checks
Title:	openSUSE: Security Advisory for samba (openSUSE-SU-2017:1415-1)
Summary:	The remote host is missing an update for the 'samba'; package(s) announced via the referenced advisory.
Description:	Summary: The remote host is missing an update for the 'samba' package(s) announced via the referenced advisory. Vulnerability Insight: This update for samba fixes the following issue: - An unprivileged user with access to the samba server could cause smbd to load a specially crafted shared library, which then had the ability to execute arbitrary code on the server as 'root'. [CVE-2017-7494, bso#12780, bsc#1038231] This update was imported from SUSE:SLE-12-SP1:Update project. NOTE: This update is released in openSUSE Leap 42.1 after its official End Of Life only because of its severity and potential impact for users that have not migrated yet. Please upgrade your openSUSE Leap 42.1 as soon as possible. Affected Software/OS: samba on openSUSE Leap 42.1 Solution: Please install the updated package(s). CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2017-7494 1038552 http://www.securitytracker.com/id/1038552 42060 https://www.exploit-db.com/exploits/42060/ 42084 https://www.exploit-db.com/exploits/42084/ 98636 http://www.securityfocus.com/bid/98636 DSA-3860 http://www.debian.org/security/2017/dsa-3860 GLSA-201805-07 https://security.gentoo.org/glsa/201805-07 RHSA-2017:1270 https://access.redhat.com/errata/RHSA-2017:1270 RHSA-2017:1271 https://access.redhat.com/errata/RHSA-2017:1271 RHSA-2017:1272 https://access.redhat.com/errata/RHSA-2017:1272 RHSA-2017:1273 https://access.redhat.com/errata/RHSA-2017:1273 RHSA-2017:1390 https://access.redhat.com/errata/RHSA-2017:1390 https://download.schneider-electric.com/files?p_enDocType=Technical+leaflet&p_File_Name=SEVD-2018-095-01+Security+Notification+Umotion+V1.1.pdf&p_Doc_Ref=SEVD-2018-095-01 https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbns03755en_us https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03759en_us https://security.netapp.com/advisory/ntap-20170524-0001/ https://www.samba.org/samba/security/CVE-2017-7494.html
Copyright	Copyright (C) 2017 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.