Red Hat Security AdvisoryRHSA-2013:1806
samba and samba3x security update
Released 2013-12-10 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) samba3x-3.6.6-0.138.el5_10, samba3x-3.6.6-0.138.el5_10.i386, samba3x-3.6.6-0.138.el5_10.ia64 +29
- Red Hat Enterprise Linux Desktop (v. 5 client) samba3x-3.6.6-0.138.el5_10, samba3x-3.6.6-0.138.el5_10.i386, samba3x-client-3.6.6-0.138.el5_10 +11
- Red Hat Enterprise Linux Desktop (v. 6) libsmbclient-3.6.9-167.el6_5, samba-3.6.9-167.el6_5, samba-client-3.6.9-167.el6_5 +3
- Red Hat Enterprise Linux Desktop Optional (v. 6) libsmbclient-devel-3.6.9-167.el6_5, samba-3.6.9-167.el6_5, samba-doc-3.6.9-167.el6_5 +4
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) samba3x-3.6.6-0.138.el5_10, samba3x-winbind-devel-3.6.6-0.138.el5_10, samba3x-winbind-devel-3.6.6-0.138.el5_10.i386
- Red Hat Enterprise Linux HPC Node (v. 6) samba-3.6.9-167.el6_5, samba-client-3.6.9-167.el6_5, samba-common-3.6.9-167.el6_5 +2
- Red Hat Enterprise Linux HPC Node Optional (v. 6) libsmbclient-3.6.9-167.el6_5, libsmbclient-devel-3.6.9-167.el6_5, samba-3.6.9-167.el6_5 +5
- Red Hat Enterprise Linux Server (v. 6) libsmbclient-3.6.9-167.el6_5, libsmbclient-3.6.9-167.el6_5.ppc, samba-3.6.9-167.el6_5 +6
- Red Hat Enterprise Linux Server Optional (v. 6) libsmbclient-devel-3.6.9-167.el6_5, libsmbclient-devel-3.6.9-167.el6_5.ppc, samba-3.6.9-167.el6_5 +6
- Red Hat Enterprise Linux Workstation (v. 6) libsmbclient-3.6.9-167.el6_5, samba-3.6.9-167.el6_5, samba-client-3.6.9-167.el6_5 +3
- Red Hat Enterprise Linux Workstation Optional (v. 6) libsmbclient-devel-3.6.9-167.el6_5, samba-3.6.9-167.el6_5, samba-doc-3.6.9-167.el6_5 +4
Fixes 2 records
Priority MEDIUM 41
Heap-based buffer overflow in the dcerpc_read_ncacn_packet_done function in librpc/rpc/dcerpc_util.c in winbindd in Samba 3.x before 3.6.22, 4.0.x before 4.0.13, and 4.1.x before 4.1.3 allows remote AD domain controllers…
CVSS 2.0HIGH 8.3· Adjacent network · No auth · Interaction — · EPSS 0.02748 · Published 2013-12-10 · Fixed CWE-119
Priority LOW 30
Samba 3.2.x through 3.6.x before 3.6.20, 4.0.x before 4.0.11, and 4.1.x before 4.1.1, when vfs_streams_depot or vfs_streams_xattr is enabled, allows remote attackers to bypass intended file restrictions by leveraging ACL…
CVSS 2.0MEDIUM 4.0· Network · No auth · Interaction — · EPSS 0.09017 · Published 2013-11-13 · Fixed CWE-264
