Red Hat Security AdvisoryRHSA-2013:1310
samba3x security and bug fix update
Released 2013-09-30 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) samba3x-3.6.6-0.136.el5, samba3x-3.6.6-0.136.el5.i386, samba3x-3.6.6-0.136.el5.ia64 +29
- Red Hat Enterprise Linux Desktop (v. 5 client) samba3x-3.6.6-0.136.el5, samba3x-3.6.6-0.136.el5.i386, samba3x-client-3.6.6-0.136.el5 +11
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) samba3x-3.6.6-0.136.el5, samba3x-winbind-devel-3.6.6-0.136.el5, samba3x-winbind-devel-3.6.6-0.136.el5.i386
Fixes 3 records
Priority MEDIUM 60
Integer overflow in the read_nttrans_ea_list function in nttrans.c in smbd in Samba 3.x before 3.5.22, 3.6.x before 3.6.17, and 4.x before 4.0.8 allows remote attackers to cause a denial of service (memory consumption) v…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.69008 · Published 2013-08-05 · Fixed CWE-189
Priority LOW 29
The Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.21, 3.6.x before 3.6.12, and 4.x before 4.0.2 allows remote attackers to conduct clickjacking attacks via a (1) FRAME or (2) IFRAME element.
CVSS 2.0MEDIUM 5.1· Network · No auth · Interaction — · EPSS 0.03248 · Published 2013-02-02 · Fixed CWE-20
Priority LOW 27
Cross-site request forgery (CSRF) vulnerability in the Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.21, 3.6.x before 3.6.12, and 4.x before 4.0.2 allows remote attackers to hijack the authentication of ar…
CVSS 2.0MEDIUM 5.1· Network · No auth · Interaction — · EPSS 0.01906 · Published 2013-02-02 · Fixed CWE-352
THREATIST.IORead the docs