Red Hat Security AdvisoryRHSA-2014:0383
samba4 security update
Released 2014-04-09 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) samba4-4.0.0-61.el6_5.rc4, samba4-client-4.0.0-61.el6_5.rc4, samba4-common-4.0.0-61.el6_5.rc4 +11
- Red Hat Enterprise Linux HPC Node (v. 6) samba4-4.0.0-61.el6_5.rc4, samba4-client-4.0.0-61.el6_5.rc4, samba4-common-4.0.0-61.el6_5.rc4 +11
- Red Hat Enterprise Linux Server (v. 6) samba4-4.0.0-61.el6_5.rc4, samba4-client-4.0.0-61.el6_5.rc4, samba4-common-4.0.0-61.el6_5.rc4 +11
- Red Hat Enterprise Linux Workstation (v. 6) samba4-4.0.0-61.el6_5.rc4, samba4-client-4.0.0-61.el6_5.rc4, samba4-common-4.0.0-61.el6_5.rc4 +11
Fixes 3 records
Priority LOW 35
Samba 3.x before 3.6.23, 4.0.x before 4.0.16, and 4.1.x before 4.1.6 does not enforce the password-guessing protection mechanism for all interfaces, which makes it easier for remote attackers to obtain access via brute-f…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.09758 · Published 2014-03-14 · Partial fix CWE-255
Priority LOW 33
The owner_set function in smbcacls.c in smbcacls in Samba 4.0.x before 4.0.16 and 4.1.x before 4.1.6 removes an ACL during use of a --chown or --chgrp option, which allows remote attackers to bypass intended access restr…
CVSS 2.0MEDIUM 5.8· Network · No auth · Interaction — · EPSS 0.04103 · Published 2014-03-14 · Fixed CWE-264
Priority LOW 24
The winbind_name_list_to_sid_string_list function in nsswitch/pam_winbind.c in Samba through 4.1.2 handles invalid require_membership_of group names by accepting authentication by any user, which allows remote authentica…
CVSS 2.0LOW 3.6· Network · Low privileges · Interaction — · EPSS 0.0379 · Published 2013-12-03 · Fixed CWE-20
THREATIST.IORead the docs