The remote Ubuntu 20.04 LTS / 22.04 LTS / 23.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6425-1 advisory.

    Sri Nagasubramanian discovered that the Samba acl_xattr VFS module incorrectly handled read-only files.
    When Samba is configured to ignore system ACLs, a remote attacker could possibly use this issue to     truncate read-only files. (CVE-2023-4091)

    Andrew Bartlett discovered that Samba incorrectly handled the DirSync control. A remote attacker with an     RODC DC account could possibly use this issue to obtain all domain secrets. (CVE-2023-4154)

    Andrew Bartlett discovered that Samba incorrectly handled the rpcecho development server. A remote     attacker could possibly use this issue to cause Samba to stop responding, resulting in a denial of     service. (CVE-2023-42669)

    Kirin van der Veer discovered that Samba incorrectly handled certain RPC service listeners. A remote     attacker could possibly use this issue to cause Samba to start multiple incompatible RPC listeners,     resulting in a denial of service. This issue only affected Ubuntu 22.04 LTS, and Ubuntu 23.04.
    (CVE-2023-42670)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Ubuntu 20.04 LTS / 22.04 LTS / 23.04 : Samba vulnerabilities (USN-6425-1)

medium Nessus Plugin ID 182845

Version 1.6