Red Hat Security AdvisoryRHSA-2014:0330
samba and samba3x security update
Released 2014-03-25 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) samba3x-3.6.6-0.139.el5_10, samba3x-3.6.6-0.139.el5_10.i386, samba3x-3.6.6-0.139.el5_10.ia64 +29
- Red Hat Enterprise Linux Desktop (v. 5 client) samba3x-3.6.6-0.139.el5_10, samba3x-3.6.6-0.139.el5_10.i386, samba3x-client-3.6.6-0.139.el5_10 +11
- Red Hat Enterprise Linux Desktop (v. 6) libsmbclient-3.6.9-168.el6_5, samba-3.6.9-168.el6_5, samba-client-3.6.9-168.el6_5 +3
- Red Hat Enterprise Linux Desktop Optional (v. 6) libsmbclient-devel-3.6.9-168.el6_5, samba-3.6.9-168.el6_5, samba-doc-3.6.9-168.el6_5 +4
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) samba3x-3.6.6-0.139.el5_10, samba3x-winbind-devel-3.6.6-0.139.el5_10, samba3x-winbind-devel-3.6.6-0.139.el5_10.i386
- Red Hat Enterprise Linux HPC Node (v. 6) samba-3.6.9-168.el6_5, samba-client-3.6.9-168.el6_5, samba-common-3.6.9-168.el6_5 +2
- Red Hat Enterprise Linux HPC Node Optional (v. 6) libsmbclient-3.6.9-168.el6_5, libsmbclient-devel-3.6.9-168.el6_5, samba-3.6.9-168.el6_5 +5
- Red Hat Enterprise Linux Server (v. 6) libsmbclient-3.6.9-168.el6_5, libsmbclient-3.6.9-168.el6_5.ppc, samba-3.6.9-168.el6_5 +6
- Red Hat Enterprise Linux Server Optional (v. 6) libsmbclient-devel-3.6.9-168.el6_5, libsmbclient-devel-3.6.9-168.el6_5.ppc, samba-3.6.9-168.el6_5 +6
- Red Hat Enterprise Linux Workstation (v. 6) libsmbclient-3.6.9-168.el6_5, samba-3.6.9-168.el6_5, samba-client-3.6.9-168.el6_5 +3
- Red Hat Enterprise Linux Workstation Optional (v. 6) libsmbclient-devel-3.6.9-168.el6_5, samba-3.6.9-168.el6_5, samba-doc-3.6.9-168.el6_5 +4
Fixes 2 records
Priority LOW 35
Samba 3.x before 3.6.23, 4.0.x before 4.0.16, and 4.1.x before 4.1.6 does not enforce the password-guessing protection mechanism for all interfaces, which makes it easier for remote attackers to obtain access via brute-f…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.09758 · Published 2014-03-14 · Partial fix CWE-255
Priority LOW 24
The winbind_name_list_to_sid_string_list function in nsswitch/pam_winbind.c in Samba through 4.1.2 handles invalid require_membership_of group names by accepting authentication by any user, which allows remote authentica…
CVSS 2.0LOW 3.6· Network · Low privileges · Interaction — · EPSS 0.0379 · Published 2013-12-03 · Fixed CWE-20
