ELSA-2014-0330

Опубликовано: 25 мар. 2014

Источник: oracle-oval

Платформа: Oracle Linux 6

Платформа: Oracle Linux 5

Описание

ELSA-2014-0330: samba and samba3x security update (MODERATE)

[3.6.9-168]

resolves: #1073905 - Fix CVE-2012-6150.
resolves: #1073905 - Fix CVE-2013-4496.

Обновленные пакеты

Oracle Linux 6

Oracle Linux x86_64

libsmbclient

3.6.9-168.el6_5

libsmbclient-devel

3.6.9-168.el6_5

samba

3.6.9-168.el6_5

samba-client

3.6.9-168.el6_5

samba-common

3.6.9-168.el6_5

samba-doc

3.6.9-168.el6_5

samba-domainjoin-gui

3.6.9-168.el6_5

samba-swat

3.6.9-168.el6_5

samba-winbind

3.6.9-168.el6_5

samba-winbind-clients

3.6.9-168.el6_5

samba-winbind-devel

3.6.9-168.el6_5

samba-winbind-krb5-locator

3.6.9-168.el6_5

Oracle Linux i686

libsmbclient

3.6.9-168.el6_5

libsmbclient-devel

3.6.9-168.el6_5

samba

3.6.9-168.el6_5

samba-client

3.6.9-168.el6_5

samba-common

3.6.9-168.el6_5

samba-doc

3.6.9-168.el6_5

samba-domainjoin-gui

3.6.9-168.el6_5

samba-swat

3.6.9-168.el6_5

samba-winbind

3.6.9-168.el6_5

samba-winbind-clients

3.6.9-168.el6_5

samba-winbind-devel

3.6.9-168.el6_5

samba-winbind-krb5-locator

3.6.9-168.el6_5

Oracle Linux 5

Oracle Linux ia64

samba3x

3.6.6-0.139.el5_10

samba3x-client

3.6.6-0.139.el5_10

samba3x-common

3.6.6-0.139.el5_10

samba3x-doc

3.6.6-0.139.el5_10

samba3x-domainjoin-gui

3.6.6-0.139.el5_10

samba3x-swat

3.6.6-0.139.el5_10

samba3x-winbind

3.6.6-0.139.el5_10

samba3x-winbind-devel

3.6.6-0.139.el5_10

Oracle Linux x86_64

samba3x

3.6.6-0.139.el5_10

samba3x-client

3.6.6-0.139.el5_10

samba3x-common

3.6.6-0.139.el5_10

samba3x-doc

3.6.6-0.139.el5_10

samba3x-domainjoin-gui

3.6.6-0.139.el5_10

samba3x-swat

3.6.6-0.139.el5_10

samba3x-winbind

3.6.6-0.139.el5_10

samba3x-winbind-devel

3.6.6-0.139.el5_10

Oracle Linux i386

samba3x

3.6.6-0.139.el5_10

samba3x-client

3.6.6-0.139.el5_10

samba3x-common

3.6.6-0.139.el5_10

samba3x-doc

3.6.6-0.139.el5_10

samba3x-domainjoin-gui

3.6.6-0.139.el5_10

samba3x-swat

3.6.6-0.139.el5_10

samba3x-winbind

3.6.6-0.139.el5_10

samba3x-winbind-devel

3.6.6-0.139.el5_10

Связанные CVE

CVE-2012-6150

CVE-2013-4496

Ссылки на источники

Связанные уязвимости

ELSA-2014-0383

oracle-oval

больше 11 лет назад

ELSA-2014-0383: samba4 security update (MODERATE)

BDU:2015-08932

fstec

больше 11 лет назад

Уязвимости операционной системы CentOS, позволяющие злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

BDU:2015-06049

fstec

больше 11 лет назад

Уязвимости операционной системы Red Hat Enterprise Linux, позволяющие злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

SUSE-SU-2015:0386-1

suse-cvrf

больше 11 лет назад

Security update for Samba

CVE-2012-6150

ubuntu

больше 11 лет назад

The winbind_name_list_to_sid_string_list function in nsswitch/pam_winbind.c in Samba through 4.1.2 handles invalid require_membership_of group names by accepting authentication by any user, which allows remote authenticated users to bypass intended access restrictions in opportunistic circumstances by leveraging an administrator's pam_winbind configuration-file mistake.