5 - RHSA-2014:0330

Executive Summary

Summary
Title	samba and samba3x security update

Informations
Name	RHSA-2014:0330	First vendor Publication	2014-03-25
Vendor	RedHat	Last vendor Modification	2014-03-25
Severity (Vendor)	Moderate	Revision	01

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:P/I:N/A:N)
Cvss Base Score	5	Attack Range	Network
Cvss Impact Score	2.9	Attack Complexity	Low
Cvss Expoit Score	10	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Problem Description:

Updated samba3x and samba packages that fix two security issues are now available for Red Hat Enterprise Linux 5 and 6 respectively.

The Red Hat Security Response Team has rated this update as having Moderate security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

2. Relevant releases/architectures:

RHEL Desktop Workstation (v. 5 client) - i386, x86_64 Red Hat Enterprise Linux (v. 5 server) - i386, ia64, ppc, s390x, x86_64 Red Hat Enterprise Linux Desktop (v. 5 client) - i386, x86_64 Red Hat Enterprise Linux Desktop (v. 6) - i386, x86_64 Red Hat Enterprise Linux Desktop Optional (v. 6) - i386, x86_64 Red Hat Enterprise Linux HPC Node (v. 6) - x86_64 Red Hat Enterprise Linux HPC Node Optional (v. 6) - x86_64 Red Hat Enterprise Linux Server (v. 6) - i386, ppc64, s390x, x86_64 Red Hat Enterprise Linux Server Optional (v. 6) - i386, ppc64, s390x, x86_64 Red Hat Enterprise Linux Workstation (v. 6) - i386, x86_64 Red Hat Enterprise Linux Workstation Optional (v. 6) - i386, x86_64

3. Description:

Samba is an open-source implementation of the Server Message Block (SMB) or Common Internet File System (CIFS) protocol, which allows PC-compatible machines to share files, printers, and other information.

It was found that certain Samba configurations did not enforce the password lockout mechanism. A remote attacker could use this flaw to perform password guessing attacks on Samba user accounts. Note: this flaw only affected Samba when deployed as a Primary Domain Controller. (CVE-2013-4496)

A flaw was found in the way the pam_winbind module handled configurations that specified a non-existent group as required. An authenticated user could possibly use this flaw to gain access to a service using pam_winbind in its PAM configuration when group restriction was intended for access to the service. (CVE-2012-6150)

Red Hat would like to thank the Samba project for reporting CVE-2013-4496 and Sam Richardson for reporting CVE-2012-6150. Upstream acknowledges Andrew Bartlett as the original reporter of CVE-2013-4496.

All users of Samba are advised to upgrade to these updated packages, which contain backported patches to correct these issues. After installing this update, the smb service will be restarted automatically.

4. Solution:

Before applying this update, make sure all previously released errata relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

5. Bugs fixed (https://bugzilla.redhat.com/):

1036897 - CVE-2012-6150 samba: pam_winbind fails open when non-existent group specified to require_membership_of 1072792 - CVE-2013-4496 samba: Password lockout not enforced for SAMR password changes

Original Source

Url : https://rhn.redhat.com/errata/RHSA-2014-0330.html

CWE : Common Weakness Enumeration

%	Id	Name
50 %	CWE-255	Credentials Management
50 %	CWE-20	Improper Input Validation

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:24242

Oval ID:	oval:org.mitre.oval:def:24242
Title:	USN-2156-1 -- samba vulnerability
Description:	Samba did not properly enforce the password guessing protection mechanism.
Family:	unix	Class:	patch
Reference(s):	USN-2156-1 CVE-2013-4496	Version:	5
Platform(s):	Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04	Product(s):	samba
Definition Synopsis:
Ubuntu 13.10 release section Ubuntu 13.10 is installed AND samba DPKG is earlier than 2:3.6.18-1ubuntu3.2 AND Ubuntu 12.10 release section Ubuntu 12.10 is installed AND samba DPKG is earlier than 2:3.6.6-3ubuntu5.4 AND Ubuntu 12.04 release section Ubuntu 12.04 is installed AND samba DPKG is earlier than 2:3.6.3-2ubuntu2.10 AND Ubuntu 10.04 release section Ubuntu 10.04 is installed AND samba DPKG is earlier than 2:3.4.7~dfsg-1ubuntu3.14

Definition Id: oval:org.mitre.oval:def:24260

Oval ID:	oval:org.mitre.oval:def:24260
Title:	RHSA-2014:0330: samba and samba3x security update (Moderate)
Description:	Samba 3.x before 3.6.23, 4.0.x before 4.0.16, and 4.1.x before 4.1.6 does not enforce the password-guessing protection mechanism for all interfaces, which makes it easier for remote attackers to obtain access via brute-force ChangePasswordUser2 (1) SAMR or (2) RAP attempts.
Family:	unix	Class:	patch
Reference(s):	RHSA-2014:0330-01 CESA-2014:0330 CVE-2012-6150 CVE-2013-4496	Version:	7
Platform(s):	Red Hat Enterprise Linux 5 Red Hat Enterprise Linux 6 CentOS Linux 5 CentOS Linux 6	Product(s):	samba3x samba
Definition Synopsis:
Operation system section Redhat 5 or Centos 5 release The operating system installed on the system is Red Hat Enterprise Linux 5 AND The operating system installed on the system is CentOS Linux 5.x Packages section samba3x-doc is earlier than 0:3.6.6-0.139.el5_10 AND samba3x-winbind is earlier than 0:3.6.6-0.139.el5_10 AND samba3x is earlier than 0:3.6.6-0.139.el5_10 AND samba3x-winbind-devel is earlier than 0:3.6.6-0.139.el5_10 AND samba3x-swat is earlier than 0:3.6.6-0.139.el5_10 AND samba3x-common is earlier than 0:3.6.6-0.139.el5_10 AND samba3x-domainjoin-gui is earlier than 0:3.6.6-0.139.el5_10 AND samba3x-client is earlier than 0:3.6.6-0.139.el5_10 AND Operation system section Redhat 6 or Centos 6 release The operating system installed on the system is Red Hat Enterprise Linux 6 AND The operating system installed on the system is CentOS Linux 6.x Packages section samba-swat is earlier than 0:3.6.9-168.el6_5 AND libsmbclient-devel is earlier than 0:3.6.9-168.el6_5 AND samba-winbind-clients is earlier than 0:3.6.9-168.el6_5 AND samba-domainjoin-gui is earlier than 0:3.6.9-168.el6_5 AND samba-winbind is earlier than 0:3.6.9-168.el6_5 AND libsmbclient is earlier than 0:3.6.9-168.el6_5 AND samba-client is earlier than 0:3.6.9-168.el6_5 AND samba-winbind-devel is earlier than 0:3.6.9-168.el6_5 AND samba is earlier than 0:3.6.9-168.el6_5 AND samba-doc is earlier than 0:3.6.9-168.el6_5 AND samba-common is earlier than 0:3.6.9-168.el6_5 AND samba-winbind-krb5-locator is earlier than 0:3.6.9-168.el6_5

Definition Id: oval:org.mitre.oval:def:24494

Oval ID:	oval:org.mitre.oval:def:24494
Title:	DEPRECATED: ELSA-2014:0330: samba and samba3x security update (Moderate)
Description:	Samba is an open-source implementation of the Server Message Block (SMB) or Common Internet File System (CIFS) protocol, which allows PC-compatible machines to share files, printers, and other information. It was found that certain Samba configurations did not enforce the password lockout mechanism. A remote attacker could use this flaw to perform password guessing attacks on Samba user accounts. Note: this flaw only affected Samba when deployed as a Primary Domain Controller. (CVE-2013-4496) A flaw was found in the way the pam_winbind module handled configurations that specified a non-existent group as required. An authenticated user could possibly use this flaw to gain access to a service using pam_winbind in its PAM configuration when group restriction was intended for access to the service. (CVE-2012-6150) Red Hat would like to thank the Samba project for reporting CVE-2013-4496 and Sam Richardson for reporting CVE-2012-6150. Upstream acknowledges Andrew Bartlett as the original reporter of CVE-2013-4496. All users of Samba are advised to upgrade to these updated packages, which contain backported patches to correct these issues. After installing this update, the smb service will be restarted automatically.
Family:	unix	Class:	patch
Reference(s):	ELSA-2014:0330-01 CVE-2012-6150 CVE-2013-4496	Version:	7
Platform(s):	Oracle Linux 5 Oracle Linux 6	Product(s):	samba3x samba
Definition Synopsis:
rpm test Oracle Linux 5.x AND rpm test samba3x-doc is earlier than 0:3.6.6-0.139.el5_10 AND samba3x-winbind is earlier than 0:3.6.6-0.139.el5_10 AND samba3x is earlier than 0:3.6.6-0.139.el5_10 AND samba3x-winbind-devel is earlier than 0:3.6.6-0.139.el5_10 AND samba3x-swat is earlier than 0:3.6.6-0.139.el5_10 AND samba3x-common is earlier than 0:3.6.6-0.139.el5_10 AND samba3x-domainjoin-gui is earlier than 0:3.6.6-0.139.el5_10 AND samba3x-client is earlier than 0:3.6.6-0.139.el5_10 OR rpm test Oracle Linux 6.x AND rpm test samba-swat is earlier than 0:3.6.9-168.el6_5 AND libsmbclient-devel is earlier than 0:3.6.9-168.el6_5 AND samba-winbind-clients is earlier than 0:3.6.9-168.el6_5 AND samba-domainjoin-gui is earlier than 0:3.6.9-168.el6_5 AND samba-winbind is earlier than 0:3.6.9-168.el6_5 AND libsmbclient is earlier than 0:3.6.9-168.el6_5 AND samba-client is earlier than 0:3.6.9-168.el6_5 AND samba-winbind-devel is earlier than 0:3.6.9-168.el6_5 AND samba is earlier than 0:3.6.9-168.el6_5 AND samba-doc is earlier than 0:3.6.9-168.el6_5 AND samba-common is earlier than 0:3.6.9-168.el6_5 AND samba-winbind-krb5-locator is earlier than 0:3.6.9-168.el6_5

Definition Id: oval:org.mitre.oval:def:24559

Oval ID:	oval:org.mitre.oval:def:24559
Title:	ELSA-2014:0330: samba and samba3x security update (Moderate)
Description:	Samba is an open-source implementation of the Server Message Block (SMB) or Common Internet File System (CIFS) protocol, which allows PC-compatible machines to share files, printers, and other information. It was found that certain Samba configurations did not enforce the password lockout mechanism. A remote attacker could use this flaw to perform password guessing attacks on Samba user accounts. Note: this flaw only affected Samba when deployed as a Primary Domain Controller. (CVE-2013-4496) A flaw was found in the way the pam_winbind module handled configurations that specified a non-existent group as required. An authenticated user could possibly use this flaw to gain access to a service using pam_winbind in its PAM configuration when group restriction was intended for access to the service. (CVE-2012-6150) Red Hat would like to thank the Samba project for reporting CVE-2013-4496 and Sam Richardson for reporting CVE-2012-6150. Upstream acknowledges Andrew Bartlett as the original reporter of CVE-2013-4496. All users of Samba are advised to upgrade to these updated packages, which contain backported patches to correct these issues. After installing this update, the smb service will be restarted automatically.
Family:	unix	Class:	patch
Reference(s):	ELSA-2014:0330-01 CVE-2012-6150 CVE-2013-4496	Version:	6
Platform(s):	Oracle Linux 5 Oracle Linux 6	Product(s):	samba3x samba
Definition Synopsis:
rpm test Oracle Linux 5.x AND rpm test samba3x-doc is earlier than 0:3.6.6-0.139.el5_10 AND samba3x-winbind is earlier than 0:3.6.6-0.139.el5_10 AND samba3x is earlier than 0:3.6.6-0.139.el5_10 AND samba3x-winbind-devel is earlier than 0:3.6.6-0.139.el5_10 AND samba3x-swat is earlier than 0:3.6.6-0.139.el5_10 AND samba3x-common is earlier than 0:3.6.6-0.139.el5_10 AND samba3x-domainjoin-gui is earlier than 0:3.6.6-0.139.el5_10 AND samba3x-client is earlier than 0:3.6.6-0.139.el5_10 OR rpm test Oracle Linux 6.x AND rpm test samba-swat is earlier than 0:3.6.9-168.el6_5 AND libsmbclient-devel is earlier than 0:3.6.9-168.el6_5 AND samba-winbind-clients is earlier than 0:3.6.9-168.el6_5 AND samba-domainjoin-gui is earlier than 0:3.6.9-168.el6_5 AND samba-winbind is earlier than 0:3.6.9-168.el6_5 AND libsmbclient is earlier than 0:3.6.9-168.el6_5 AND samba-client is earlier than 0:3.6.9-168.el6_5 AND samba-winbind-devel is earlier than 0:3.6.9-168.el6_5 AND samba is earlier than 0:3.6.9-168.el6_5 AND samba-doc is earlier than 0:3.6.9-168.el6_5 AND samba-common is earlier than 0:3.6.9-168.el6_5 AND samba-winbind-krb5-locator is earlier than 0:3.6.9-168.el6_5

Definition Id: oval:org.mitre.oval:def:24798

Oval ID:	oval:org.mitre.oval:def:24798
Title:	SUSE-SU-2014:0723-1 -- Security update for Samba
Description:	This is a LTSS roll-up update for the Samba Server suite fixing multiple security issues and bugs. Security issues fixed: * CVE-2013-4496: Password lockout was not enforced for SAMR password changes, leading to brute force possibility. * CVE-2013-4408: DCE-RPC fragment length field is incorrectly checked. * CVE-2013-4124: Samba was affected by a denial of service attack on authenticated or guest connections. * CVE-2013-0214: The SWAT webadministration was affected by a cross site scripting attack (XSS). * CVE-2013-0213: The SWAT webadministration could possibly be used in clickjacking attacks.
Family:	unix	Class:	patch
Reference(s):	SUSE-SU-2014:0723-1 CVE-2013-4496 CVE-2013-4408 CVE-2013-4124 CVE-2013-0214 CVE-2013-0213 CVE-2012-6150	Version:	3
Platform(s):	SUSE Linux Enterprise Server 11	Product(s):	Samba
Definition Synopsis:
SUSE Linux Enterprise Server 11.x is installed Packages match section cifs-mount RPM is earlier than 0:3.4.3-1.52.3 AND ldapsmb RPM is earlier than 0:1.34b-11.28.52.3 AND libsmbclient0 RPM is earlier than 0:3.4.3-1.52.3 AND libtalloc1 RPM is earlier than 0:3.4.3-1.52.3 AND libtdb1 RPM is earlier than 0:3.4.3-1.52.3 AND libwbclient0 RPM is earlier than 0:3.4.3-1.52.3 AND samba RPM is earlier than 0:3.4.3-1.52.3 AND samba-client RPM is earlier than 0:3.4.3-1.52.3 AND samba-krb-printing RPM is earlier than 0:3.4.3-1.52.3 AND samba-winbind RPM is earlier than 0:3.4.3-1.52.3 AND libsmbclient0-32bit RPM is earlier than 0:3.4.3-1.52.3 AND libtalloc1-32bit RPM is earlier than 0:3.4.3-1.52.3 AND libtdb1-32bit RPM is earlier than 0:3.4.3-1.52.3 AND libwbclient0-32bit RPM is earlier than 0:3.4.3-1.52.3 AND samba-32bit RPM is earlier than 0:3.4.3-1.52.3 AND samba-client-32bit RPM is earlier than 0:3.4.3-1.52.3 AND samba-winbind-32bit RPM is earlier than 0:3.4.3-1.52.3 AND samba-doc RPM is earlier than 0:3.4.3-1.52.3

Definition Id: oval:org.mitre.oval:def:25152

Oval ID:	oval:org.mitre.oval:def:25152
Title:	SUSE-SU-2014:0497-1 -- Security update for Samba
Description:	The Samba fileserver suite was updated to fix bugs and security issues.
Family:	unix	Class:	patch
Reference(s):	SUSE-SU-2014:0497-1 CVE-2013-4496	Version:	3
Platform(s):	SUSE Linux Enterprise Server 11 SUSE Linux Enterprise Desktop 11	Product(s):	Samba
Definition Synopsis:
SUSE Linux Enterprise Server 11 release section SUSE Linux Enterprise Server 11.x is installed AND ldapsmb RPM is earlier than 0:1.34b-12.50.1 AND SUSE Linux Enterprise Server 11 and SUSE Linux Enterprise Desktop 11 release section Operation system section SUSE Linux Enterprise Server 11.x is installed AND SUSE Linux Enterprise Desktop 11.x is installed Packages match section libldb1 RPM is earlier than 0:3.6.3-0.50.1 AND libsmbclient0 RPM is earlier than 0:3.6.3-0.50.1 AND libtalloc2 RPM is earlier than 0:3.6.3-0.50.1 AND libtdb1 RPM is earlier than 0:3.6.3-0.50.1 AND libtevent0 RPM is earlier than 0:3.6.3-0.50.1 AND libwbclient0 RPM is earlier than 0:3.6.3-0.50.1 AND samba RPM is earlier than 0:3.6.3-0.50.1 AND samba-client RPM is earlier than 0:3.6.3-0.50.1 AND samba-krb-printing RPM is earlier than 0:3.6.3-0.50.1 AND samba-winbind RPM is earlier than 0:3.6.3-0.50.1 AND libsmbclient0-32bit RPM is earlier than 0:3.6.3-0.50.1 AND libtalloc2-32bit RPM is earlier than 0:3.6.3-0.50.1 AND libtdb1-32bit RPM is earlier than 0:3.6.3-0.50.1 AND libtevent0-32bit RPM is earlier than 0:3.6.3-0.50.1 AND libwbclient0-32bit RPM is earlier than 0:3.6.3-0.50.1 AND samba-32bit RPM is earlier than 0:3.6.3-0.50.1 AND samba-client-32bit RPM is earlier than 0:3.6.3-0.50.1 AND samba-winbind-32bit RPM is earlier than 0:3.6.3-0.50.1 AND samba-doc RPM is earlier than 0:3.6.3-0.50.1 AND SUSE Linux Enterprise Desktop 11 release section SUSE Linux Enterprise Desktop 11.x is installed AND libldb1-32bit RPM is earlier than 0:3.6.3-0.50.1

Definition Id: oval:org.mitre.oval:def:25353

Oval ID:	oval:org.mitre.oval:def:25353
Title:	SUSE-SU-2014:0901-1 -- Security update for Samba
Description:	Samba was updated to fix three security issues and several non-security issue.
Family:	unix	Class:	patch
Reference(s):	SUSE-SU-2014:0901-1 CVE-2014-3493 CVE-2014-0244 CVE-2014-0178 CVE-2013-4496	Version:	3
Platform(s):	SUSE Linux Enterprise Server 11	Product(s):	Samba
Definition Synopsis:
SUSE Linux Enterprise Server 11.x is installed Packages match section ldapsmb RPM is earlier than 0:1.34b-12.33.41.2 AND libldb1 RPM is earlier than 0:3.6.3-0.33.41.2 AND libsmbclient0 RPM is earlier than 0:3.6.3-0.33.41.2 AND libtalloc1 RPM is earlier than 0:3.4.3-1.54.4 AND libtalloc2 RPM is earlier than 0:3.6.3-0.33.41.2 AND libtdb1 RPM is earlier than 0:3.6.3-0.33.41.2 AND libtevent0 RPM is earlier than 0:3.6.3-0.33.41.2 AND libwbclient0 RPM is earlier than 0:3.6.3-0.33.41.2 AND samba RPM is earlier than 0:3.6.3-0.33.41.2 AND samba-client RPM is earlier than 0:3.6.3-0.33.41.2 AND samba-krb-printing RPM is earlier than 0:3.6.3-0.33.41.2 AND samba-winbind RPM is earlier than 0:3.6.3-0.33.41.2 AND libsmbclient0-32bit RPM is earlier than 0:3.6.3-0.33.41.2 AND libtalloc1-32bit RPM is earlier than 0:3.4.3-1.54.4 AND libtalloc2-32bit RPM is earlier than 0:3.6.3-0.33.41.2 AND libtdb1-32bit RPM is earlier than 0:3.6.3-0.33.41.2 AND libtevent0-32bit RPM is earlier than 0:3.6.3-0.33.41.2 AND libwbclient0-32bit RPM is earlier than 0:3.6.3-0.33.41.2 AND samba-32bit RPM is earlier than 0:3.6.3-0.33.41.2 AND samba-client-32bit RPM is earlier than 0:3.6.3-0.33.41.2 AND samba-winbind-32bit RPM is earlier than 0:3.6.3-0.33.41.2 AND samba-doc RPM is earlier than 0:3.6.3-0.33.41.2

Definition Id: oval:org.mitre.oval:def:26319

Oval ID:	oval:org.mitre.oval:def:26319
Title:	HP-UX CIFS Server (Samba), Remote Denial of Service (DoS), Execution of Arbitrary Code, Unauthorized Access
Description:	The winbind_name_list_to_sid_string_list function in nsswitch/pam_winbind.c in Samba through 4.1.2 handles invalid require_membership_of group names by accepting authentication by any user, which allows remote authenticated users to bypass intended access restrictions in opportunistic circumstances by leveraging an administrator's pam_winbind configuration-file mistake.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2012-6150	Version:	8
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX03087 HP-UX B.11.31 AND filesets tests CIFS-Development.CIFS-PRG version is less than A.03.02.02 AND CIFS-Server.CIFS-ADMIN version is less than A.03.02.02 AND CIFS-Server.CIFS-DOC version is less than A.03.02.02 AND CIFS-Server.CIFS-LIB version is less than A.03.02.02 AND CIFS-Server.CIFS-RUN version is less than A.03.02.02 AND CIFS-Server.CIFS-UTIL version is less than A.03.02.02 OR Criteria meets HP Security Bulletin HPSBUX03087 HP-UX B.11.31 AND filesets tests CIFS-Development.CIFS-PRG version is less than A.03.02.01 AND CIFS-Server.CIFS-ADMIN version is less than A.03.02.01 AND CIFS-Server.CIFS-DOC version is less than A.03.02.01 AND CIFS-Server.CIFS-LIB version is less than A.03.02.01 AND CIFS-Server.CIFS-RUN version is less than A.03.02.01 AND CIFS-Server.CIFS-UTIL version is less than A.03.02.01 OR Criteria meets HP Security Bulletin HPSBUX03087 HP-UX B.11.31 AND filesets tests CIFS-Development.CIFS-PRG version is less than A.03.02.00 AND CIFS-Server.CIFS-ADMIN version is less than A.03.02.00 AND CIFS-Server.CIFS-DOC version is less than A.03.02.00 AND CIFS-Server.CIFS-LIB version is less than A.03.02.00 AND CIFS-Server.CIFS-RUN version is less than A.03.02.00 AND CIFS-Server.CIFS-UTIL version is less than A.03.02.00 OR Criteria meets HP Security Bulletin HPSBUX03087 HP-UX B.11.31 AND filesets tests CIFS-Development.CIFS-PRG version is less than A.03.01.06 AND CIFS-Server.CIFS-ADMIN version is less than A.03.01.06 AND CIFS-Server.CIFS-DOC version is less than A.03.01.06 AND CIFS-Server.CIFS-LIB version is less than A.03.01.06 AND CIFS-Server.CIFS-RUN version is less than A.03.01.06 AND CIFS-CFSM.CFSM-KRN version is less than A.03.01.06 AND CIFS-CFSM.CFSM-RUN version is less than A.03.01.06 OR Criteria meets HP Security Bulletin HPSBUX03087 HP-UX B.11.31 AND filesets tests CIFS-Development.CIFS-PRG version is less than A.03.01.05 AND CIFS-Server.CIFS-ADMIN version is less than A.03.01.05 AND CIFS-Server.CIFS-DOC version is less than A.03.01.05 AND CIFS-Server.CIFS-LIB version is less than A.03.01.05 AND CIFS-Server.CIFS-RUN version is less than A.03.01.05 AND CIFS-Server.CIFS-UTIL version is less than A.03.01.05 OR Criteria meets HP Security Bulletin HPSBUX03087 HP-UX B.11.23 AND filesets tests CIFS-Development.CIFS-PRG version is less than A.03.02.02 AND CIFS-Server.CIFS-ADMIN version is less than A.03.02.02 AND CIFS-Server.CIFS-DOC version is less than A.03.02.02 AND CIFS-Server.CIFS-LIB version is less than A.03.02.02 AND CIFS-Server.CIFS-RUN version is less than A.03.02.02 AND CIFS-Server.CIFS-UTIL version is less than A.03.02.02 OR Criteria meets HP Security Bulletin HPSBUX03087 HP-UX B.11.23 AND filesets tests CIFS-Development.CIFS-PRG version is less than A.03.02.00 AND CIFS-Server.CIFS-ADMIN version is less than A.03.02.00 AND CIFS-Server.CIFS-DOC version is less than A.03.02.00 AND CIFS-Server.CIFS-LIB version is less than A.03.02.00 AND CIFS-Server.CIFS-RUN version is less than A.03.02.00 AND CIFS-Server.CIFS-UTIL version is less than A.03.02.00 OR Criteria meets HP Security Bulletin HPSBUX03087 HP-UX B.11.23 AND filesets tests CIFS-Development.CIFS-PRG version is less than A.03.01.07 AND CIFS-Server.CIFS-ADMIN version is less than A.03.01.07 AND CIFS-Server.CIFS-DOC version is less than A.03.01.07 AND CIFS-Server.CIFS-LIB version is less than A.03.01.07 AND CIFS-Server.CIFS-RUN version is less than A.03.01.07 AND CIFS-Server.CIFS-UTIL version is less than A.03.01.07 OR Criteria meets HP Security Bulletin HPSBUX03087 HP-UX B.11.23 AND filesets tests CIFS-Development.CIFS-PRG version is less than A.03.01.05 AND CIFS-Server.CIFS-ADMIN version is less than A.03.01.05 AND CIFS-Server.CIFS-DOC version is less than A.03.01.05 AND CIFS-Server.CIFS-LIB version is less than A.03.01.05 AND CIFS-Server.CIFS-RUN version is less than A.03.01.05 AND CIFS-Server.CIFS-UTIL version is less than A.03.01.05 OR Criteria meets HP Security Bulletin HPSBUX03087 HP-UX B.11.11 AND filesets tests CIFS-Development.CIFS-PRG version is less than A.02.04.06 AND CIFS-Server.CIFS-ADMIN version is less than A.02.04.06 AND CIFS-Server.CIFS-DOC version is less than A.02.04.06 AND CIFS-Server.CIFS-LIB version is less than A.02.04.06 AND CIFS-Server.CIFS-RUN version is less than A.02.04.06 AND CIFS-Server.CIFS-UTIL version is less than A.02.04.06 OR Criteria meets HP Security Bulletin HPSBUX03087 HP-UX B.11.11 AND filesets tests CIFS-Development.CIFS-PRG version is less than A.02.03.06 AND CIFS-Server.CIFS-ADMIN version is less than A.02.03.06 AND CIFS-Server.CIFS-DOC version is less than A.02.03.06 AND CIFS-Server.CIFS-LIB version is less than A.02.03.06 AND CIFS-Server.CIFS-RUN version is less than A.02.03.06 AND CIFS-Server.CIFS-UTIL version is less than A.02.03.06

Definition Id: oval:org.mitre.oval:def:26958

Oval ID:	oval:org.mitre.oval:def:26958
Title:	DEPRECATED: ELSA-2014-0330 -- samba and samba3x security update (moderate)
Description:	[3.6.9-168] - resolves: #1073905 - Fix CVE-2012-6150. - resolves: #1073905 - Fix CVE-2013-4496.
Family:	unix	Class:	patch
Reference(s):	ELSA-2014-0330 CVE-2012-6150 CVE-2013-4496	Version:	4
Platform(s):	Oracle Linux 5 Oracle Linux 6	Product(s):	samba3x samba
Definition Synopsis:
Oracle Linux 5 release section Oracle Linux 5.x Packages match section samba3x is earlier than 0:3.6.6-0.139.el5_10 AND samba3x-client is earlier than 0:3.6.6-0.139.el5_10 AND samba3x-common is earlier than 0:3.6.6-0.139.el5_10 AND samba3x-doc is earlier than 0:3.6.6-0.139.el5_10 AND samba3x-domainjoin-gui is earlier than 0:3.6.6-0.139.el5_10 AND samba3x-swat is earlier than 0:3.6.6-0.139.el5_10 AND samba3x-winbind is earlier than 0:3.6.6-0.139.el5_10 AND samba3x-winbind-devel is earlier than 0:3.6.6-0.139.el5_10 AND Oracle Linux 6 release section Oracle Linux 6.x Packages match section samba is earlier than 0:3.6.9-168.el6_5 AND libsmbclient is earlier than 0:3.6.9-168.el6_5 AND libsmbclient-devel is earlier than 0:3.6.9-168.el6_5 AND samba-client is earlier than 0:3.6.9-168.el6_5 AND samba-common is earlier than 0:3.6.9-168.el6_5 AND samba-doc is earlier than 0:3.6.9-168.el6_5 AND samba-domainjoin-gui is earlier than 0:3.6.9-168.el6_5 AND samba-swat is earlier than 0:3.6.9-168.el6_5 AND samba-winbind is earlier than 0:3.6.9-168.el6_5 AND samba-winbind-clients is earlier than 0:3.6.9-168.el6_5 AND samba-winbind-devel is earlier than 0:3.6.9-168.el6_5 AND samba-winbind-krb5-locator is earlier than 0:3.6.9-168.el6_5

CPE : Common Platform Enumeration

Type	Description	Count
Application	Samba cpe:2.3:a:samba:samba:4.1.5:::::::* cpe:2.3:a:samba:samba:4.1.4:::::::* cpe:2.3:a:samba:samba:4.1.3:::::::* cpe:2.3:a:samba:samba:4.1.2:::::::* cpe:2.3:a:samba:samba:4.1.1:::::::* cpe:2.3:a:samba:samba:4.1.0:::::::* cpe:2.3:a:samba:samba:4.0.9:::::::* cpe:2.3:a:samba:samba:4.0.8:::::::* cpe:2.3:a:samba:samba:4.0.7:::::::* cpe:2.3:a:samba:samba:4.0.6:::::::* cpe:2.3:a:samba:samba:4.0.5:::::::* cpe:2.3:a:samba:samba:4.0.4:::::::* cpe:2.3:a:samba:samba:4.0.3:::::::* cpe:2.3:a:samba:samba:4.0.26:::::::* cpe:2.3:a:samba:samba:4.0.25:::::::* cpe:2.3:a:samba:samba:4.0.24:::::::* cpe:2.3:a:samba:samba:4.0.23:::::::* cpe:2.3:a:samba:samba:4.0.22:::::::* cpe:2.3:a:samba:samba:4.0.21:::::::* cpe:2.3:a:samba:samba:4.0.20:::::::* cpe:2.3:a:samba:samba:4.0.2:::::::* cpe:2.3:a:samba:samba:4.0.19:::::::* cpe:2.3:a:samba:samba:4.0.18:::::::* cpe:2.3:a:samba:samba:4.0.17:::::::* cpe:2.3:a:samba:samba:4.0.16:::::::* cpe:2.3:a:samba:samba:4.0.15:::::::* cpe:2.3:a:samba:samba:4.0.14:::::::* cpe:2.3:a:samba:samba:4.0.13:::::::* cpe:2.3:a:samba:samba:4.0.12:::::::* cpe:2.3:a:samba:samba:4.0.11:::::::* cpe:2.3:a:samba:samba:4.0.10:::::::* cpe:2.3:a:samba:samba:4.0.1:::::::* cpe:2.3:a:samba:samba:4.0.0:::::::* cpe:2.3:a:samba:samba:3.6.9:::::::* cpe:2.3:a:samba:samba:3.6.8:::::::* cpe:2.3:a:samba:samba:3.6.7:::::::* cpe:2.3:a:samba:samba:3.6.6:::::::* cpe:2.3:a:samba:samba:3.6.5:::::::* cpe:2.3:a:samba:samba:3.6.4:::::::* cpe:2.3:a:samba:samba:3.6.3:::::::* cpe:2.3:a:samba:samba:3.6.25:::::::* cpe:2.3:a:samba:samba:3.6.24:::::::* cpe:2.3:a:samba:samba:3.6.23:::::::* cpe:2.3:a:samba:samba:3.6.22:::::::* cpe:2.3:a:samba:samba:3.6.21:::::::* cpe:2.3:a:samba:samba:3.6.20:::::::* cpe:2.3:a:samba:samba:3.6.2:::::::* cpe:2.3:a:samba:samba:3.6.19:::::::* cpe:2.3:a:samba:samba:3.6.18:::::::* cpe:2.3:a:samba:samba:3.6.17:::::::* cpe:2.3:a:samba:samba:3.6.16:::::::* cpe:2.3:a:samba:samba:3.6.15:::::::* cpe:2.3:a:samba:samba:3.6.14:::::::* cpe:2.3:a:samba:samba:3.6.13:::::::* cpe:2.3:a:samba:samba:3.6.12:::::::* cpe:2.3:a:samba:samba:3.6.11:::::::* cpe:2.3:a:samba:samba:3.6.10:::::::* cpe:2.3:a:samba:samba:3.6.1:::::::* cpe:2.3:a:samba:samba:3.6.0:::::::* cpe:2.3:a:samba:samba:3.5.9:::::::* cpe:2.3:a:samba:samba:3.5.8:::::::* cpe:2.3:a:samba:samba:3.5.7:::::::* cpe:2.3:a:samba:samba:3.5.6:::::::* cpe:2.3:a:samba:samba:3.5.5:::::::* cpe:2.3:a:samba:samba:3.5.4:::::::* cpe:2.3:a:samba:samba:3.5.3:::::::* cpe:2.3:a:samba:samba:3.5.22:::::::* cpe:2.3:a:samba:samba:3.5.21:::::::* cpe:2.3:a:samba:samba:3.5.20:::::::* cpe:2.3:a:samba:samba:3.5.2:::::::* cpe:2.3:a:samba:samba:3.5.19:::::::* cpe:2.3:a:samba:samba:3.5.18:::::::* cpe:2.3:a:samba:samba:3.5.17:::::::* cpe:2.3:a:samba:samba:3.5.16:::::::* cpe:2.3:a:samba:samba:3.5.15:::::::* cpe:2.3:a:samba:samba:3.5.14:::::::* cpe:2.3:a:samba:samba:3.5.13:::::::* cpe:2.3:a:samba:samba:3.5.12:::::::* cpe:2.3:a:samba:samba:3.5.11:::::::* cpe:2.3:a:samba:samba:3.5.10:::::::* cpe:2.3:a:samba:samba:3.5.1:::::::* cpe:2.3:a:samba:samba:3.5.0:::::::* cpe:2.3:a:samba:samba:3.5:::::::* cpe:2.3:a:samba:samba:3.4.9:::::::* cpe:2.3:a:samba:samba:3.4.8:::::::* cpe:2.3:a:samba:samba:3.4.7:::::::* cpe:2.3:a:samba:samba:3.4.6:::::::* cpe:2.3:a:samba:samba:3.4.5:::::::* cpe:2.3:a:samba:samba:3.4.4:::::::* cpe:2.3:a:samba:samba:3.4.3:::::::* cpe:2.3:a:samba:samba:3.4.2:::::::* cpe:2.3:a:samba:samba:3.4.17:::::::* cpe:2.3:a:samba:samba:3.4.16:::::::* cpe:2.3:a:samba:samba:3.4.15:::::::* cpe:2.3:a:samba:samba:3.4.14:::::::* cpe:2.3:a:samba:samba:3.4.13:::::::* cpe:2.3:a:samba:samba:3.4.12:::::::* cpe:2.3:a:samba:samba:3.4.11:::::::* cpe:2.3:a:samba:samba:3.4.10:::::::* cpe:2.3:a:samba:samba:3.4.1:::::::* cpe:2.3:a:samba:samba:3.4.0:::::::* cpe:2.3:a:samba:samba:3.4:::::::* cpe:2.3:a:samba:samba:3.3.9:::::::* cpe:2.3:a:samba:samba:3.3.8:::::::* cpe:2.3:a:samba:samba:3.3.7:::::::* cpe:2.3:a:samba:samba:3.3.6:::::::* cpe:2.3:a:samba:samba:3.3.5:::::::* cpe:2.3:a:samba:samba:3.3.4:::::::* cpe:2.3:a:samba:samba:3.3.3:::::::* cpe:2.3:a:samba:samba:3.3.2:::::::* cpe:2.3:a:samba:samba:3.3.16:::::::* cpe:2.3:a:samba:samba:3.3.15:::::::* cpe:2.3:a:samba:samba:3.3.14:::::::* cpe:2.3:a:samba:samba:3.3.13:::::::* cpe:2.3:a:samba:samba:3.3.12:::::::* cpe:2.3:a:samba:samba:3.3.11:::::::* cpe:2.3:a:samba:samba:3.3.10:::::::* cpe:2.3:a:samba:samba:3.3.1:::::::* cpe:2.3:a:samba:samba:3.3.0:::::::* cpe:2.3:a:samba:samba:3.3:::::::* cpe:2.3:a:samba:samba:3.2.9:::::::* cpe:2.3:a:samba:samba:3.2.8:::::::* cpe:2.3:a:samba:samba:3.2.7:::::::* cpe:2.3:a:samba:samba:3.2.6:::::::* cpe:2.3:a:samba:samba:3.2.5:::::::* cpe:2.3:a:samba:samba:3.2.4:::::::* cpe:2.3:a:samba:samba:3.2.3:::::::* cpe:2.3:a:samba:samba:3.2.2:::::::* cpe:2.3:a:samba:samba:3.2.15:::::::* cpe:2.3:a:samba:samba:3.2.14:::::::* cpe:2.3:a:samba:samba:3.2.13:::::::* cpe:2.3:a:samba:samba:3.2.12:::::::* cpe:2.3:a:samba:samba:3.2.11:::::::* cpe:2.3:a:samba:samba:3.2.10:::::::* cpe:2.3:a:samba:samba:3.2.1:::::::* cpe:2.3:a:samba:samba:3.2.0:::::::* cpe:2.3:a:samba:samba:3.2:::::::* cpe:2.3:a:samba:samba:3.1.0:::::::* cpe:2.3:a:samba:samba:3.0.9:::::::* cpe:2.3:a:samba:samba:3.0.8:::::::* cpe:2.3:a:samba:samba:3.0.7:::::::* cpe:2.3:a:samba:samba:3.0.6:::::::* cpe:2.3:a:samba:samba:3.0.5:::::::* cpe:2.3:a:samba:samba:3.0.4:rc1:::::: cpe:2.3:a:samba:samba:3.0.4:-:::::: cpe:2.3:a:samba:samba:3.0.37:::::::* cpe:2.3:a:samba:samba:3.0.36:::::::* cpe:2.3:a:samba:samba:3.0.35:::::::* cpe:2.3:a:samba:samba:3.0.34:::::::* cpe:2.3:a:samba:samba:3.0.33:::::::* cpe:2.3:a:samba:samba:3.0.32:::::::* cpe:2.3:a:samba:samba:3.0.31:::::::* cpe:2.3:a:samba:samba:3.0.30:::::::* cpe:2.3:a:samba:samba:3.0.3:::::::* cpe:2.3:a:samba:samba:3.0.2a:::::::* cpe:2.3:a:samba:samba:3.0.29:::::::* cpe:2.3:a:samba:samba:3.0.28a:::::::* cpe:2.3:a:samba:samba:3.0.28:-:::::: cpe:2.3:a:samba:samba:3.0.28:a:::::: cpe:2.3:a:samba:samba:3.0.27a:::::::* cpe:2.3:a:samba:samba:3.0.27:-:::::: cpe:2.3:a:samba:samba:3.0.27:a:::::: cpe:2.3:a:samba:samba:3.0.26a:::::::* cpe:2.3:a:samba:samba:3.0.26:a:::::: cpe:2.3:a:samba:samba:3.0.26:-:::::: cpe:2.3:a:samba:samba:3.0.25c:::::::* cpe:2.3:a:samba:samba:3.0.25b:::::::* cpe:2.3:a:samba:samba:3.0.25a:::::::* cpe:2.3:a:samba:samba:3.0.25:rc2:::::: cpe:2.3:a:samba:samba:3.0.25:rc3:::::: cpe:2.3:a:samba:samba:3.0.25:pre1:::::: cpe:2.3:a:samba:samba:3.0.25:rc1:::::: cpe:2.3:a:samba:samba:3.0.25:-:::::: cpe:2.3:a:samba:samba:3.0.25:a:::::: cpe:2.3:a:samba:samba:3.0.25:pre2:::::: cpe:2.3:a:samba:samba:3.0.25:c:::::: cpe:2.3:a:samba:samba:3.0.25:b:::::: cpe:2.3:a:samba:samba:3.0.24:::::::* cpe:2.3:a:samba:samba:3.0.23d:::::::* cpe:2.3:a:samba:samba:3.0.23c:::::::* cpe:2.3:a:samba:samba:3.0.23b:::::::* cpe:2.3:a:samba:samba:3.0.23a:::::::* cpe:2.3:a:samba:samba:3.0.23:-:::::: cpe:2.3:a:samba:samba:3.0.23:a:::::: cpe:2.3:a:samba:samba:3.0.23:d:::::: cpe:2.3:a:samba:samba:3.0.23:c:::::: cpe:2.3:a:samba:samba:3.0.23:b:::::: cpe:2.3:a:samba:samba:3.0.22:::::::* cpe:2.3:a:samba:samba:3.0.21c:::::::* cpe:2.3:a:samba:samba:3.0.21b:::::::* cpe:2.3:a:samba:samba:3.0.21a:::::::* cpe:2.3:a:samba:samba:3.0.21:-:::::: cpe:2.3:a:samba:samba:3.0.21:a:::::: cpe:2.3:a:samba:samba:3.0.21:c:::::: cpe:2.3:a:samba:samba:3.0.21:b:::::: cpe:2.3:a:samba:samba:3.0.20b:::::::* cpe:2.3:a:samba:samba:3.0.20a:::::::* cpe:2.3:a:samba:samba:3.0.20:b:::::: cpe:2.3:a:samba:samba:3.0.20:-:::::: cpe:2.3:a:samba:samba:3.0.20:a:::::: cpe:2.3:a:samba:samba:3.0.2:a:::::: cpe:2.3:a:samba:samba:3.0.2:-:::::: cpe:2.3:a:samba:samba:3.0.19:::::::* cpe:2.3:a:samba:samba:3.0.18:::::::* cpe:2.3:a:samba:samba:3.0.17:::::::* cpe:2.3:a:samba:samba:3.0.16:::::::* cpe:2.3:a:samba:samba:3.0.15:::::::* cpe:2.3:a:samba:samba:3.0.14a:::::::* cpe:2.3:a:samba:samba:3.0.14:-:::::: cpe:2.3:a:samba:samba:3.0.14:a:::::: cpe:2.3:a:samba:samba:3.0.13:::::::* cpe:2.3:a:samba:samba:3.0.12:::::::* cpe:2.3:a:samba:samba:3.0.11:::::::* cpe:2.3:a:samba:samba:3.0.10:::::::* cpe:2.3:a:samba:samba:3.0.1:::::::* cpe:2.3:a:samba:samba:3.0.0:::::::* cpe:2.3:a:samba:samba:2.2a:::::::* cpe:2.3:a:samba:samba:2.2.9:::::::* cpe:2.3:a:samba:samba:2.2.8a:::::::* cpe:2.3:a:samba:samba:2.2.8:-:::::: cpe:2.3:a:samba:samba:2.2.8:a:::::: cpe:2.3:a:samba:samba:2.2.7a:::::::* cpe:2.3:a:samba:samba:2.2.7:-:::::: cpe:2.3:a:samba:samba:2.2.7:a:::::: cpe:2.3:a:samba:samba:2.2.6:::::::* cpe:2.3:a:samba:samba:2.2.5:::::::* cpe:2.3:a:samba:samba:2.2.4:::::::* cpe:2.3:a:samba:samba:2.2.3a:::::::* cpe:2.3:a:samba:samba:2.2.3:-:::::: cpe:2.3:a:samba:samba:2.2.3:a:::::: cpe:2.3:a:samba:samba:2.2.2:::::::* cpe:2.3:a:samba:samba:2.2.1a:::::::* cpe:2.3:a:samba:samba:2.2.12:::::::* cpe:2.3:a:samba:samba:2.2.11:::::::* cpe:2.3:a:samba:samba:2.2.10:::::::* cpe:2.3:a:samba:samba:2.2.1:-:::::: cpe:2.3:a:samba:samba:2.2.1:a:::::: cpe:2.3:a:samba:samba:2.2.0a:::::::* cpe:2.3:a:samba:samba:2.2.0:-:::::: cpe:2.3:a:samba:samba:2.2.0:a:::::: cpe:2.3:a:samba:samba:2.2:a:::::: cpe:2.3:a:samba:samba:2.18.3:::::::* cpe:2.3:a:samba:samba:2.0.9:::::::* cpe:2.3:a:samba:samba:2.0.8:::::::* cpe:2.3:a:samba:samba:2.0.7:::::::* cpe:2.3:a:samba:samba:2.0.6:::::::* cpe:2.3:a:samba:samba:2.0.5a:::::::* cpe:2.3:a:samba:samba:2.0.5:-:::::: cpe:2.3:a:samba:samba:2.0.5:a:::::: cpe:2.3:a:samba:samba:2.0.4:::::::* cpe:2.3:a:samba:samba:2.0.3:::::::* cpe:2.3:a:samba:samba:2.0.2:::::::* cpe:2.3:a:samba:samba:2.0.10:::::::* cpe:2.3:a:samba:samba:2.0.1:::::::* cpe:2.3:a:samba:samba:2.0.0:::::::* cpe:2.3:a:samba:samba:2.0:::::::* cpe:2.3:a:samba:samba:1.9.18:p10:::::: cpe:2.3:a:samba:samba:1.9.18:p6:::::: cpe:2.3:a:samba:samba:1.9.18:p8:::::: cpe:2.3:a:samba:samba:1.9.18:p1:::::: cpe:2.3:a:samba:samba:1.9.18:p4:::::: cpe:2.3:a:samba:samba:1.9.18:p2:::::: cpe:2.3:a:samba:samba:1.9.18:p3:::::: cpe:2.3:a:samba:samba:1.9.18:p7:::::: cpe:2.3:a:samba:samba:1.9.18:p5:::::: cpe:2.3:a:samba:samba:1.9.18:-:::::: cpe:2.3:a:samba:samba:1.9.17:p4:::::: cpe:2.3:a:samba:samba:1.9.17:p1:::::: cpe:2.3:a:samba:samba:1.9.17:p5:::::: cpe:2.3:a:samba:samba:1.9.17:::::::* cpe:2.3:a:samba:samba:1.9.17:p2:::::: cpe:2.3:a:samba:samba:1.9.17:p3:::::: cpe:2.3:a:samba:samba:::::::: cpe:2.3:a:samba:samba:-:::::::*	274
Os	Canonical Ubuntu Linux cpe:2.3:o:canonical:ubuntu_linux:13.10:::::::* cpe:2.3:o:canonical:ubuntu_linux:13.04:::::::* cpe:2.3:o:canonical:ubuntu_linux:12.10:::::::* cpe:2.3:o:canonical:ubuntu_linux:12.04::::-::: cpe:2.3:o:canonical:ubuntu_linux:10.04::::-:::	5

Nessus® Vulnerability Scanner

Date	Description
2016-04-21	Name : The remote openSUSE host is missing a security update. File : openSUSE-2016-490.nasl - Type : ACT_GATHER_INFO
2015-05-20	Name : The remote SUSE host is missing one or more security updates. File : suse_SU-2014-0723-1.nasl - Type : ACT_GATHER_INFO
2015-03-30	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2015-082.nasl - Type : ACT_GATHER_INFO
2015-02-26	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201502-15.nasl - Type : ACT_GATHER_INFO
2015-01-19	Name : The remote Solaris system is missing a security patch for third-party software. File : solaris11_samba_20140522.nasl - Type : ACT_GATHER_INFO
2015-01-19	Name : The remote Solaris system is missing a security patch for third-party software. File : solaris11_samba_20140225.nasl - Type : ACT_GATHER_INFO
2014-08-20	Name : The remote Fedora host is missing a security update. File : fedora_2014-9132.nasl - Type : ACT_GATHER_INFO
2014-06-26	Name : The remote Fedora host is missing a security update. File : fedora_2014-7672.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : openSUSE-2014-229.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : openSUSE-2014-228.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : openSUSE-2013-996.nasl - Type : ACT_GATHER_INFO
2014-04-11	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2014-0383.nasl - Type : ACT_GATHER_INFO
2014-04-10	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20140409_samba4_on_SL6_x.nasl - Type : ACT_GATHER_INFO
2014-04-10	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2014-0383.nasl - Type : ACT_GATHER_INFO
2014-04-10	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2014-0383.nasl - Type : ACT_GATHER_INFO
2014-04-08	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_cifs-mount-140312.nasl - Type : ACT_GATHER_INFO
2014-03-28	Name : The remote Fedora host is missing a security update. File : fedora_2014-3815.nasl - Type : ACT_GATHER_INFO
2014-03-27	Name : The remote Ubuntu host is missing a security-related patch. File : ubuntu_USN-2156-1.nasl - Type : ACT_GATHER_INFO
2014-03-26	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20140325_samba_and_samba3x_on_SL5_x.nasl - Type : ACT_GATHER_INFO
2014-03-26	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2014-0330.nasl - Type : ACT_GATHER_INFO
2014-03-26	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2014-0330.nasl - Type : ACT_GATHER_INFO
2014-03-26	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2014-0330.nasl - Type : ACT_GATHER_INFO
2014-03-18	Name : The remote Samba server is affected by multiple vulnerabilities. File : samba_4_1_6.nasl - Type : ACT_GATHER_INFO
2014-03-17	Name : The remote Fedora host is missing a security update. File : fedora_2014-3796.nasl - Type : ACT_GATHER_INFO
2014-03-17	Name : The remote Slackware host is missing a security update. File : Slackware_SSA_2014-072-01.nasl - Type : ACT_GATHER_INFO
2014-03-12	Name : The remote FreeBSD host is missing one or more security-related updates. File : freebsd_pkg_03e48bf5a96d11e3a5563c970e169bc2.nasl - Type : ACT_GATHER_INFO
2014-01-07	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_cifs-mount-131213.nasl - Type : ACT_GATHER_INFO
2013-12-24	Name : The remote Fedora host is missing a security update. File : fedora_2013-23177.nasl - Type : ACT_GATHER_INFO
2013-12-23	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2013-299.nasl - Type : ACT_GATHER_INFO
2013-12-16	Name : The remote Fedora host is missing a security update. File : fedora_2013-23085.nasl - Type : ACT_GATHER_INFO
2013-12-12	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-2054-1.nasl - Type : ACT_GATHER_INFO
2013-12-12	Name : The remote Samba server is affected by multiple vulnerabilities. File : samba_4_1_3.nasl - Type : ACT_GATHER_INFO
2013-12-10	Name : The remote FreeBSD host is missing one or more security-related updates. File : freebsd_pkg_613e45d1615411e39b62000c292e4fd8.nasl - Type : ACT_GATHER_INFO

Alert History

If you want to see full details history, please login or register.

Date	Informations
2014-03-27 13:21:38	Multiple Updates
2014-03-25 21:19:37	First insertion

Global Informations

Type	Count
CWE ID(s)	2
Oval ID(s)	9
CPE ID(s)	279
Nessus® Exploit(s)	33

	Related
5	CVE-2013-4496
3.6	CVE-2012-6150
Info : listing not affected by your CVSS Env Score

Same Subject	Severity
Login to view 2 more Alert(s)

5 - RHSA-2014:0330

Executive Summary

Security-Database Scoring CVSS v3

Security-Database Scoring CVSS v2

Detail

Original Source

CWE : Common Weakness Enumeration

OVAL Definitions

CPE : Common Platform Enumeration

Nessus® Vulnerability Scanner

Alert History

Global Informations

Open Standards

Other Databases

COMPANY

STANDARDS

RECENT POSTS

MENU