The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-0612 advisory.

    ipa     [4.2.0-15.0.1.6.1]
    - Drop redhat-access-plugin-ipa requires for OL7       Blank out header-logo.png product-name.png       Replace login-screen-logo.png [20362818]

    [4.2.0-15.6.1]
    - Rebuild against newer Samba version
    - Related: #1322690

    libldb     [1.1.25-1]
    - Rebase libldb to 1.1.25
    - Related: rhbz#1322690

    libtalloc     [2.1.5-1]
    - Rebase to libtalloc 2.1.5
    - Related: rhbz#1322690

    libtdb     [1.3.8-1]
    - Rebase libtdb to 1.3.8
    - Related: rhbz#1322690

    libtevent     [0.9.26-1]
    - Rebase libtevent to 0.9.26
    - Related: rhbz#1322690

    openchange     [2.0-10]
    - Add a patch to fix connection string (Related: #1322690)

    samba     [4.2.10-6]
    - Fix domain member winbind not being able to talk to trusted domains' DCs
    - relates: #1322690

    [4.2.10-5]
    - Fix crash in smb.conf processing
    - relates: #1322690

    [4.2.10-4]
    - Fix LDAP SASL bind with arcfour-hmac-md5
    - resolves: #1322690

    [4.2.10-3]
    - Make sure the package owns /var/lib/samba and uses it for cache purposes
    - resolves: #1322690

    [4.2.10-2]
    - Remove ldb modules and internal libraries for DC when not packaging DC build
    - resolves: #1322690

    [4.2.10-1]
    - resolves: #1322690

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Oracle Linux 6 / 7 : samba / and / samba4 (ELSA-2016-0612)

high Nessus Plugin ID 90487

Version 2.20

Version 2.19

Version 2.20 Nov 1, 2024, 11:44 PM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin Feed: 202411012344
Version 2.19 Oct 22, 2024, 9:14 PM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 score source (set to "CVE-2016-2118") CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202410222114