Red Hat Security Advisory

RHSA-2016:0623

samba security update

Released 2016-04-12 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Long Life (v. 5.6 server) libsmbclient-3.0.33-3.30.el5_6, libsmbclient-3.0.33-3.30.el5_6.i386, libsmbclient-3.0.33-3.30.el5_6.ia64 +15
Red Hat Enterprise Linux Long Life (v. 5.9 server) libsmbclient-3.0.33-3.40.el5_9, libsmbclient-3.0.33-3.40.el5_9.i386, libsmbclient-devel-3.0.33-3.40.el5_9 +9

Fixes 3 records

TI-2016-01942 CVE-2016-2118 · GHSA-9r74-96x3-hvq9

The MS-SAMR and MS-LSAD protocol implementations in Samba 3.x and 4.x before 4.2.11…

MEDIUM 59

The MS-SAMR and MS-LSAD protocol implementations in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 mishandle DCERPC connections, which allows man-in-the-middle attackers to perform protocol-d…

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.37181 Published 2016-04-12 Fixed CWE-254

TI-2016-01934 CVE-2016-2110 · GHSA-59r3-hh3x-g9v9

The NTLMSSP authentication implementation in Samba 3.x and 4.x before 4.2.11, 4.3.x…

LOW 37

The NTLMSSP authentication implementation in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 allows man-in-the-middle attackers to perform protocol-downgrade attacks by modifying the client-se…

CVSS 3.0MEDIUM 5.9 Network No auth No interaction EPSS 0.08305 Published 2016-04-25 Fixed CWE-254

TI-2016-01935 CVE-2016-2111 · GHSA-x65g-mfcj-xhc5

The NETLOGON service in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x…

LOW 33

The NETLOGON service in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2, when a domain controller is configured, allows remote attackers to spoof the computer name of a secure channel's endpoi…

CVSS 3.0MEDIUM 6.3 Local No auth User interaction EPSS 0.02902 Published 2016-04-25 Fixed CWE-254