Stack-based buffer overflow in cifskey.c or cifscreds.c in cifs-utils before 6.4, as used in pam_cifscreds, allows remote attackers to have unspecified impact via unknown vectors.

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - cifs-utils: stack-based buffer overflow flaw in pam_cifscreds (CVE-2014-2830)

  - samba: Server heap-memory disclosure (CVE-2017-15275)

  - A flaw was found in the way samba implemented an RPC endpoint emulating the Windows registry service API.
    An unprivileged attacker could use this flaw to create a new registry hive file anywhere they have unix     permissions which could lead to creation of a new file in the Samba share. Versions before 4.8.11, 4.9.6     and 4.10.2 are vulnerable. (CVE-2019-3880)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched.

  - cifs-utils: stack-based buffer overflow flaw in pam_cifscreds (CVE-2014-2830)

Note that Nessus has not tested for this issue but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - cifs-utils: stack-based buffer overflow flaw in pam_cifscreds (CVE-2014-2830)

  - samba: symlink race permits opening files outside share directory (CVE-2017-2619)

  - mount.cifs in cifs-utils 2.6 allows local users to determine the existence of arbitrary files or     directories via the file path in the second argument, which reveals their existence in an error message.
    (CVE-2012-1586)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

According to the version of the cifs-utils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability :

  - Stack-based buffer overflow in cifskey.c or cifscreds.c     in cifs-utils before 6.4, as used in pam_cifscreds,     allows remote attackers to have unspecified impact via     unknown vectors.(CVE-2014-2830)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the cifs-utils package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability :

  - Stack-based buffer overflow in cifskey.c or cifscreds.c     in cifs-utils before 6.4, as used in pam_cifscreds,     allows remote attackers to have unspecified impact via     unknown vectors.(CVE-2014-2830)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the cifs-utils package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - Stack-based buffer overflow in cifskey.c or cifscreds.c     in cifs-utils before 6.4, as used in pam_cifscreds,     allows remote attackers to have unspecified impact via     unknown vectors.(CVE-2014-2830)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-201612-08 (LinuxCIFS utils: Buffer overflow)

    A stack-based buffer overflow was discovered in cifskey.c or cifscreds.c       in LinuxCIFS, as used in &ldquo;pam_cifscreds.&rdquo;
  Impact :

    A remote attacker could exploit this vulnerability to cause an       unspecified impact.
  Workaround :

    Don&rsquo;t use LinuxCIFS utils&rsquo; &ldquo;cifscreds&rdquo; PAM module. In Gentoo,       LinuxCIFS utils&rsquo; PAM support is disabled by default unless the       &ldquo;pam&rdquo; USE flag is enabled.

Updated cifs-utils packages fix security vulnerability :

Sebastian Krahmer discovered a stack-based buffer overflow flaw in cifscreds.c (CVE-2014-2830).

ID	Name	Product	Family	Severity
199796	RHEL 6 : samba (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high
199751	RHEL 7 : samba (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	critical
199740	RHEL 5 : samba (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high
135657	EulerOS Virtualization 3.0.2.2 : cifs-utils (EulerOS-SA-2020-1495)	Nessus	Huawei Local Security Checks	critical
134542	EulerOS Virtualization for ARM 64 3.0.2.0 : cifs-utils (EulerOS-SA-2020-1253)	Nessus	Huawei Local Security Checks	critical
132279	EulerOS 2.0 SP3 : cifs-utils (EulerOS-SA-2019-2562)	Nessus	Huawei Local Security Checks	critical
131858	EulerOS 2.0 SP2 : cifs-utils (EulerOS-SA-2019-2366)	Nessus	Huawei Local Security Checks	critical
130840	EulerOS 2.0 SP5 : cifs-utils (EulerOS-SA-2019-2131)	Nessus	Huawei Local Security Checks	critical
95523	GLSA-201612-08 : LinuxCIFS utils: Buffer overflow	Nessus	Gentoo Local Security Checks	critical
82367	Mandriva Linux Security Advisory : cifs-utils (MDVSA-2015:114)	Nessus	Mandriva Local Security Checks	critical

Detections

Analytics

CVE-2014-2830

critical

Tenable Plugins

high

critical

high

critical

critical

critical

critical

critical

critical

critical