Detections
Analytics
CentOS 5 : samba (CESA-2008:0290)
high Nessus Plugin ID 43686
Language:
Synopsis
The remote CentOS host is missing one or more security updates.Description
Updated samba packages that fix a security issue and two bugs are now available for Red Hat Enterprise Linux 5.This update has been rated as having critical security impact by the Red Hat Security Response Team.
Samba is a suite of programs used by machines to share files, printers, and other information.
A heap-based buffer overflow flaw was found in the way Samba clients handle over-sized packets. If a client connected to a malicious Samba server, it was possible to execute arbitrary code as the Samba client user. It was also possible for a remote user to send a specially crafted print request to a Samba server that could result in the server executing the vulnerable client code, resulting in arbitrary code execution with the permissions of the Samba server.
(CVE-2008-1105)
Red Hat would like to thank Alin Rad Pop of Secunia Research for responsibly disclosing this issue.
This update also addresses two issues which prevented Samba from joining certain Windows domains with tightened security policies, and prevented certain signed SMB content from working as expected :
* when some Windows(r) 2000-based domain controllers were set to use mandatory signing, Samba clients would drop the connection because of an error when generating signatures. This presented as a 'Server packet had invalid SMB signature' error to the Samba client. This update corrects the signature generation error.
* Samba servers using the 'net ads join' command to connect to a Windows Server(r) 2003-based domain would fail with 'failed to get schannel session key from server' and 'NT_STATUS_ACCESS_DENIED' errors. This update correctly binds to the NETLOGON share, allowing Samba servers to connect to the domain properly.
Users of Samba are advised to upgrade to these updated packages, which contain a backported patch to resolve these issues.
Solution
Update the affected samba packages.See Also
Plugin Details
Severity: High
ID: 43686
File Name: centos_RHSA-2008-0290.nasl
Version: 1.14
Type: local
Agent: unix
Family: CentOS Local Security Checks
Published: 1/6/2010
Updated: 1/4/2021
Supported Sensors: Frictionless Assessment AWS, Frictionless Assessment Azure, Frictionless Assessment Agent, Agentless Assessment, Continuous Assessment, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.0
CVSS v2
Risk Factor: High
Base Score: 7.5
Temporal Score: 5.9
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P
Vulnerability Information
CPE: p-cpe:/a:centos:centos:samba-swat, p-cpe:/a:centos:centos:samba, p-cpe:/a:centos:centos:samba-common, cpe:/o:centos:centos:5, p-cpe:/a:centos:centos:samba-client
Required KB Items: Host/local_checks_enabled, Host/CentOS/release, Host/CentOS/rpm-list
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 6/26/2008
Vulnerability Publication Date: 5/29/2008
Reference Information
CVE: CVE-2008-1105
BID: 29404