Red Hat Security AdvisoryRHSA-2009:1585
samba3x security and bug fix update
Released 2009-11-16 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop Supplementary (v. 5) libsmbclient-3.0.34-46.el5, libsmbclient-devel-3.0.34-46.el5, libtalloc-1.2.0-46.el5 +12
- Red Hat Enterprise Linux Server Supplementary (v. 5) libsmbclient-3.0.34-46.el5, libsmbclient-devel-3.0.34-46.el5, libtalloc-1.2.0-46.el5 +12
Fixes 4 records
Priority LOW 34
The acl_group_override function in smbd/posix_acls.c in smbd in Samba 3.0.x before 3.0.35, 3.1.x and 3.2.x before 3.2.13, and 3.3.x before 3.3.6, when dos filemode is enabled, allows remote attackers to modify access con…
CVSS 2.0MEDIUM 5.8· Network · No auth · Interaction — · EPSS 0.04606 · Published 2009-06-24 · Fixed CWE-264
Priority LOW 32
Samba 3.4 before 3.4.2, 3.3 before 3.3.8, 3.2 before 3.2.15, and 3.0.12 through 3.0.36, as used in the SMB subsystem in Apple Mac OS X 10.5.8 when Windows File Sharing is enabled, Fedora 11, and other operating systems,…
CVSS 2.0MEDIUM 6.0· Network · Low privileges · Interaction — · EPSS 0.02725 · Published 2009-09-14 · Fixed CWE-264
Priority LOW 26
smbd in Samba 3.0 before 3.0.37, 3.2 before 3.2.15, 3.3 before 3.3.8, and 3.4 before 3.4.2 allows remote authenticated users to cause a denial of service (infinite loop) via an unanticipated oplock break notification rep…
CVSS 2.0MEDIUM 4.0· Network · Low privileges · Interaction — · EPSS 0.04207 · Published 2009-10-07 · Fixed CWE-835
Priority LOW 11
mount.cifs in Samba 3.0 before 3.0.37, 3.2 before 3.2.15, 3.3 before 3.3.8 and 3.4 before 3.4.2, when mount.cifs is installed suid root, does not properly enforce permissions, which allows local users to read part of the…
CVSS 2.0LOW 1.9· Local · No auth · Interaction — · EPSS 0.0052 · Published 2009-10-07 · Fixed CWE-732