Red Hat Security AdvisoryRHSA-2011:1219
samba security update
Released 2011-08-29 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- RHEL Desktop Workstation (v. 5 client) libsmbclient-devel-3.0.33-3.29.el5_7.4, libsmbclient-devel-3.0.33-3.29.el5_7.4.i386, samba-3.0.33-3.29.el5_7.4
- Red Hat Enterprise Linux (v. 5 server) libsmbclient-3.0.33-3.29.el5_7.4, libsmbclient-3.0.33-3.29.el5_7.4.i386, libsmbclient-3.0.33-3.29.el5_7.4.ia64 +21
- Red Hat Enterprise Linux AS version 4 samba-3.0.33-0.34.el4, samba-3.0.33-0.34.el4.i386, samba-3.0.33-0.34.el4.ia64 +13
- Red Hat Enterprise Linux Desktop (v. 5 client) libsmbclient-3.0.33-3.29.el5_7.4, libsmbclient-3.0.33-3.29.el5_7.4.i386, samba-3.0.33-3.29.el5_7.4 +7
- Red Hat Enterprise Linux Desktop version 4 samba-3.0.33-0.34.el4, samba-3.0.33-0.34.el4.i386, samba-client-3.0.33-0.34.el4 +5
- Red Hat Enterprise Linux ES version 4 samba-3.0.33-0.34.el4, samba-3.0.33-0.34.el4.i386, samba-3.0.33-0.34.el4.ia64 +9
- Red Hat Enterprise Linux WS version 4 samba-3.0.33-0.34.el4, samba-3.0.33-0.34.el4.i386, samba-3.0.33-0.34.el4.ia64 +9
Fixes 6 records
Priority MEDIUM 43
Multiple cross-site request forgery (CSRF) vulnerabilities in the Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.10 allow remote attackers to hijack the authentication of administrators for requests that (1…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.10621 · Published 2011-07-29 · Fixed CWE-352
Priority LOW 22
Multiple race conditions in the (1) mount.cifs and (2) umount.cifs programs in Samba 3.6 allow local users to cause a denial of service (mounting outage) via a SIGKILL signal during a time window when the /etc/mtab~ file…
CVSS 3.1MEDIUM 4.7· Local · Low privileges · No interaction · EPSS 0.00317 · Published 2019-12-31 · Fixed CWE-362
Priority LOW 22
Cross-site scripting (XSS) vulnerability in the chg_passwd function in web/swat.c in the Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.10 allows remote authenticated administrators to inject arbitrary web…
CVSS 2.0LOW 2.6· Network · No auth · Interaction — · EPSS 0.06049 · Published 2011-07-29 · Fixed CWE-79
Priority LOW 21
client/mount.cifs.c in mount.cifs in smbfs in Samba 3.0.22, 3.0.28a, 3.2.3, 3.3.2, 3.4.0, and 3.4.5 allows local users to mount a CIFS share on an arbitrary mountpoint, and gain privileges, via a symlink attack on the mo…
CVSS 2.0MEDIUM 4.4· Local · No auth · Interaction — · EPSS 0.00517 · Published 2010-03-02 · Fixed CWE-59
Priority LOW 17
smbfs in Samba 3.5.8 and earlier attempts to use (1) mount.cifs to append to the /etc/mtab file and (2) umount.cifs to append to the /etc/mtab.tmp file without first checking whether resource limits would interfere, whic…
CVSS 2.0LOW 3.3· Local · No auth · Interaction — · EPSS 0.00531 · Published 2011-04-10 · Fixed CWE-20
Priority LOW 12
client/mount.cifs.c in mount.cifs in smbfs in Samba 3.4.5 and earlier does not verify that the (1) device name and (2) mountpoint strings are composed of valid characters, which allows local users to cause a denial of se…
CVSS 2.0LOW 2.1· Local · No auth · Interaction — · EPSS 0.00484 · Published 2010-02-04 · Fixed CWE-20
THREATIST.IORead the docs