![]() |
Home ▼ Bookkeeping
Online ▼ Security
Audits ▼
Managed
DNS ▼
About
Order
FAQ
Acceptable Use Policy
Dynamic DNS Clients
Configure Domains Dyanmic DNS Update Password Network
Monitor ▼
Enterprise Package
Advanced Package
Standard Package
Free Trial
FAQ
Price/Feature Summary
Order/Renew
Examples
Configure/Status Alert Profiles | ||
Test ID: | 1.3.6.1.4.1.25623.1.1.4.2012.0337.1 |
Category: | SuSE Local Security Checks |
Title: | SUSE: Security Advisory (SUSE-SU-2012:0337-1) |
Summary: | The remote host is missing an update for the 'Samba' package(s) announced via the SUSE-SU-2012:0337-1 advisory. |
Description: | Summary: The remote host is missing an update for the 'Samba' package(s) announced via the SUSE-SU-2012:0337-1 advisory. Vulnerability Insight: This update of Samba fixes a heap-based buffer overflow that could be exploited by remote, unauthenticated attackers to crash the smbd daemon or potentially execute arbitrary code via specially crafted SMB AndX request packets (CVE-2012-0870). Also fixed two non security bugs: * Fix to handle domain join using NetBIOS name, (bnc #633729). * Fixed the DFS referral response for msdfs root, (bnc#703655). Security Issue reference: * CVE-2012-0870 > Affected Software/OS: 'Samba' package(s) on SUSE Linux Enterprise Desktop 10-SP4, SUSE Linux Enterprise Server 10-SP3, SUSE Linux Enterprise Server 10-SP4. Solution: Please install the updated package(s). CVSS Score: 7.9 CVSS Vector: AV:A/AC:M/Au:N/C:C/I:C/A:C |
Cross-Ref: |
Common Vulnerability Exposure (CVE) ID: CVE-2012-0870 48116 http://secunia.com/advisories/48116 48186 http://secunia.com/advisories/48186 48844 http://secunia.com/advisories/48844 48879 http://secunia.com/advisories/48879 APPLE-SA-2012-05-09-1 http://lists.apple.com/archives/security-announce/2012/May/msg00001.html SUSE-SU-2012:0337 http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00008.html SUSE-SU-2012:0338 http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00009.html SUSE-SU-2012:0502 http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00008.html SUSE-SU-2012:0515 http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00014.html USN-1374-1 http://www.ubuntu.com/usn/USN-1374-1 blackberry-playbook-samba-code-execution(73361) https://exchange.xforce.ibmcloud.com/vulnerabilities/73361 http://btsc.webapps.blackberry.com/btsc/search.do?cmd=displayKC&docType=kc&externalId=KB29565 http://support.apple.com/kb/HT5281 https://bugzilla.redhat.com/show_bug.cgi?id=795509 |
Copyright | Copyright (C) 2021 Greenbone AG |
This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below. |