Test ID:	1.3.6.1.4.1.25623.1.1.13.2018.229.02
Category:	Slackware Local Security Checks
Title:	Slackware: Security Advisory (SSA:2018-229-02)
Summary:	The remote host is missing an update for the 'samba' package(s) announced via the SSA:2018-229-02 advisory.
Description:	Summary: The remote host is missing an update for the 'samba' package(s) announced via the SSA:2018-229-02 advisory. Vulnerability Insight: New samba packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: +--------------------------+ patches/packages/samba-4.6.16-i586-1_slack14.2.txz: Upgraded. This is a security release in order to address the following defects: Insufficient input validation on client directory listing in libsmbclient. A malicious server could return a directory entry that could corrupt libsmbclient memory. Confidential attribute disclosure from the AD LDAP server. Missing access control checks allow discovery of confidential attribute values via authenticated LDAP search expressions. For more information, see: [links moved to references] (* Security fix *) +--------------------------+ Affected Software/OS: 'samba' package(s) on Slackware 14.0, Slackware 14.1, Slackware 14.2, Slackware current. Solution: Please install the updated package(s). CVSS Score: 6.5 CVSS Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2018-10858 BugTraq ID: 105085 http://www.securityfocus.com/bid/105085 Debian Security Information: DSA-4271 (Google Search) https://www.debian.org/security/2018/dsa-4271 https://security.gentoo.org/glsa/202003-52 RedHat Security Advisories: RHSA-2018:2612 https://access.redhat.com/errata/RHSA-2018:2612 RedHat Security Advisories: RHSA-2018:2613 https://access.redhat.com/errata/RHSA-2018:2613 RedHat Security Advisories: RHSA-2018:3056 https://access.redhat.com/errata/RHSA-2018:3056 RedHat Security Advisories: RHSA-2018:3470 https://access.redhat.com/errata/RHSA-2018:3470 http://www.securitytracker.com/id/1042002 https://usn.ubuntu.com/3738-1/ Common Vulnerability Exposure (CVE) ID: CVE-2018-10919 BugTraq ID: 105081 http://www.securityfocus.com/bid/105081
Copyright	Copyright (C) 2022 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.