Red Hat Security AdvisoryRHSA-2016:0621
samba security update
Released 2016-04-12 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) libsmbclient-3.0.33-3.41.el5_11, libsmbclient-3.0.33-3.41.el5_11.i386, libsmbclient-3.0.33-3.41.el5_11.ia64 +21
- Red Hat Enterprise Linux Desktop (v. 5 client) libsmbclient-3.0.33-3.41.el5_11, libsmbclient-3.0.33-3.41.el5_11.i386, samba-3.0.33-3.41.el5_11 +7
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) libsmbclient-devel-3.0.33-3.41.el5_11, libsmbclient-devel-3.0.33-3.41.el5_11.i386, samba-3.0.33-3.41.el5_11
Fixes 3 records
Priority MEDIUM 59
The MS-SAMR and MS-LSAD protocol implementations in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 mishandle DCERPC connections, which allows man-in-the-middle attackers to perform protocol-d…
CVSS 3.1HIGH 7.5· Network · No auth · User interaction · EPSS 0.37181 · Published 2016-04-12 · Fixed CWE-254
Priority LOW 37
The NTLMSSP authentication implementation in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 allows man-in-the-middle attackers to perform protocol-downgrade attacks by modifying the client-se…
CVSS 3.0MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.08305 · Published 2016-04-25 · Fixed CWE-254
Priority LOW 33
The NETLOGON service in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2, when a domain controller is configured, allows remote attackers to spoof the computer name of a secure channel's endpoi…
CVSS 3.0MEDIUM 6.3· Local · No auth · User interaction · EPSS 0.02902 · Published 2016-04-25 · Fixed CWE-254
THREATIST.IORead the docs