Detections
Analytics
Samba < 3.6.22 / 4.0.13 / 4.1.3 Multiple Vulnerabilities
high Nessus Network Monitor Plugin ID 8075
Synopsis
The remote Samba server is affected by multiple vulnerabilities.Description
According to its banner, the version of Samba running on this system (i.e., earlier than 3.6.22 / 4.0.13 / 4.1.3) contain the following known vulnerabilities:- A security bypass vulnerability via the 'winbind_name_list_to_sid_string_list()' that would allow a malicious authenticated user to modify the 'pam_winbind' configuration file. (CVE-2012-6150)
- A buffer overflow vulnerability in the 'dcerpc_read_ncacn_packet_done()' function that can allow remote AD domain controllers to execute arbitrary code (CVE-2013-4408)
- ACLs were not checked when opening files with alternate data streams, though this issue is only exploitable if the VFS modules vfs_streams_depot and/or vfs_streams_xattr are used. (CVE-2013-4475)
Solution
Install the patch referenced in the project's advisory, or upgrade to 3.6.22 / 4.0.13 / 4.1.3 or later.See Also
https://www.samba.org/samba/security/CVE-2013-4408
https://www.samba.org/samba/security/CVE-2012-6150
https://www.samba.org/samba/history
https://www.samba.org/samba/history/security.html
http://lists.debian.org/debian-security-announce/2013/msg00226.html
Plugin Details
Severity: High
ID: 8075
Family: Samba
Published: 12/26/2013
Updated: 3/6/2019
Nessus ID: 71447
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: High
Base Score: 7.6
Temporal Score: 6.6
Vector: CVSS2#AV:N/AC:H/Au:N/C:C/I:C/A:C
CVSS v3
Risk Factor: High
Base Score: 8.1
Temporal Score: 7.7
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:X/RL:O/RC:C
Vulnerability Information
CPE: cpe:/a:samba:samba
Patch Publication Date: 12/26/2013
Vulnerability Publication Date: 12/9/2013