Red Hat Security AdvisoryRHSA-2009:1529
samba security update
Released 2009-10-27 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) samba-3.0.33-3.15.el5_4, samba-3.0.33-3.15.el5_4.i386, samba-3.0.33-3.15.el5_4.ia64 +13
- Red Hat Enterprise Linux AS version 4 samba-3.0.33-0.18.el4_8, samba-3.0.33-0.18.el4_8.i386, samba-3.0.33-0.18.el4_8.ia64 +13
- Red Hat Enterprise Linux Desktop (v. 5 client) samba-3.0.33-3.15.el5_4, samba-3.0.33-3.15.el5_4.i386, samba-client-3.0.33-3.15.el5_4 +5
- Red Hat Enterprise Linux Desktop version 4 samba-3.0.33-0.18.el4_8, samba-3.0.33-0.18.el4_8.i386, samba-client-3.0.33-0.18.el4_8 +5
- Red Hat Enterprise Linux ES version 4 samba-3.0.33-0.18.el4_8, samba-3.0.33-0.18.el4_8.i386, samba-3.0.33-0.18.el4_8.ia64 +9
- Red Hat Enterprise Linux WS version 4 samba-3.0.33-0.18.el4_8, samba-3.0.33-0.18.el4_8.i386, samba-3.0.33-0.18.el4_8.ia64 +9
Fixes 4 records
Priority LOW 34
The acl_group_override function in smbd/posix_acls.c in smbd in Samba 3.0.x before 3.0.35, 3.1.x and 3.2.x before 3.2.13, and 3.3.x before 3.3.6, when dos filemode is enabled, allows remote attackers to modify access con…
CVSS 2.0MEDIUM 5.8· Network · No auth · Interaction — · EPSS 0.04606 · Published 2009-06-24 · Fixed CWE-264
Priority LOW 32
Samba 3.4 before 3.4.2, 3.3 before 3.3.8, 3.2 before 3.2.15, and 3.0.12 through 3.0.36, as used in the SMB subsystem in Apple Mac OS X 10.5.8 when Windows File Sharing is enabled, Fedora 11, and other operating systems,…
CVSS 2.0MEDIUM 6.0· Network · Low privileges · Interaction — · EPSS 0.02725 · Published 2009-09-14 · Fixed CWE-264
Priority LOW 26
smbd in Samba 3.0 before 3.0.37, 3.2 before 3.2.15, 3.3 before 3.3.8, and 3.4 before 3.4.2 allows remote authenticated users to cause a denial of service (infinite loop) via an unanticipated oplock break notification rep…
CVSS 2.0MEDIUM 4.0· Network · Low privileges · Interaction — · EPSS 0.04207 · Published 2009-10-07 · Fixed CWE-835
Priority LOW 11
mount.cifs in Samba 3.0 before 3.0.37, 3.2 before 3.2.15, 3.3 before 3.3.8 and 3.4 before 3.4.2, when mount.cifs is installed suid root, does not properly enforce permissions, which allows local users to read part of the…
CVSS 2.0LOW 1.9· Local · No auth · Interaction — · EPSS 0.0052 · Published 2009-10-07 · Fixed CWE-732
THREATIST.IORead the docs