Red Hat Security AdvisoryRHSA-2012:0533
samba and samba3x security update
Released 2012-04-30 · Red Hat rating Important · View on Red Hat →
Fixed in
- RHEL Desktop Workstation (v. 5 client) samba3x-3.5.10-0.109.el5_8, samba3x-winbind-devel-3.5.10-0.109.el5_8, samba3x-winbind-devel-3.5.10-0.109.el5_8.i386
- Red Hat Enterprise Linux (v. 5 server) samba3x-3.5.10-0.109.el5_8, samba3x-3.5.10-0.109.el5_8.i386, samba3x-3.5.10-0.109.el5_8.ia64 +29
- Red Hat Enterprise Linux Desktop (v. 5 client) samba3x-3.5.10-0.109.el5_8, samba3x-3.5.10-0.109.el5_8.i386, samba3x-client-3.5.10-0.109.el5_8 +11
- Red Hat Enterprise Linux Desktop (v. 6) libsmbclient-3.5.10-116.el6_2, samba-3.5.10-116.el6_2, samba-client-3.5.10-116.el6_2 +3
- Red Hat Enterprise Linux Desktop Optional (v. 6) libsmbclient-devel-3.5.10-116.el6_2, samba-3.5.10-116.el6_2, samba-doc-3.5.10-116.el6_2 +4
- Red Hat Enterprise Linux HPC Node (v. 6) samba-3.5.10-116.el6_2, samba-client-3.5.10-116.el6_2, samba-common-3.5.10-116.el6_2 +2
- Red Hat Enterprise Linux HPC Node Optional (v. 6) libsmbclient-3.5.10-116.el6_2, libsmbclient-devel-3.5.10-116.el6_2, samba-3.5.10-116.el6_2 +5
- Red Hat Enterprise Linux Server (v. 6) libsmbclient-3.5.10-116.el6_2, libsmbclient-3.5.10-116.el6_2.ppc, samba-3.5.10-116.el6_2 +6
- Red Hat Enterprise Linux Server Optional (v. 6) libsmbclient-devel-3.5.10-116.el6_2, libsmbclient-devel-3.5.10-116.el6_2.ppc, samba-3.5.10-116.el6_2 +6
- Red Hat Enterprise Linux Workstation (v. 6) libsmbclient-3.5.10-116.el6_2, samba-3.5.10-116.el6_2, samba-client-3.5.10-116.el6_2 +3
- Red Hat Enterprise Linux Workstation Optional (v. 6) libsmbclient-devel-3.5.10-116.el6_2, samba-3.5.10-116.el6_2, samba-doc-3.5.10-116.el6_2 +4
Fixes 1 record
Priority LOW 36
The (1) CreateAccount, (2) OpenAccount, (3) AddAccountRights, and (4) RemoveAccountRights LSA RPC procedures in smbd in Samba 3.4.x before 3.4.17, 3.5.x before 3.5.15, and 3.6.x before 3.6.5 do not properly restrict modi…
CVSS 2.0MEDIUM 6.5· Network · Low privileges · Interaction — · EPSS 0.04749 · Published 2012-04-30 · Fixed CWE-264
