oval:org.mitre.oval:def:13986

Definition Id: oval:org.mitre.oval:def:13986

Oval ID:	oval:org.mitre.oval:def:13986
Title:	USN-702-1 -- samba vulnerability
Description:	Gunter Höckel discovered that Samba with registry shares enabled did not properly validate share names. An authenticated user could gain access to the root filesystem by using an older version of smbclient and specifying an empty string as a share name. This is only an issue if registry shares are enabled on the server by setting "registry shares = yes", "include = registry", or "config backend = registry", which is not the default.
Family:	unix	Class:	patch
Reference(s):	USN-702-1 CVE-2009-0022	Version:	5
Platform(s):	Ubuntu 8.10	Product(s):	samba
Definition Synopsis:
Ubuntu 8.10 is installed Architecture section Architecture independent section Installed architecture is all AND Packages section samba-doc DPKG is earlier than 2:3.2.3-1ubuntu3.4 AND samba-doc-pdf DPKG is earlier than 2:3.2.3-1ubuntu3.4 OR Architecture depended section Supported architectures section Installed architecture is amd64 AND Installed architecture is i386 AND Installed architecture is powerpc AND Installed architecture is sparc AND Installed architecture is lpia AND Packages section smbfs DPKG is earlier than 2:3.2.3-1ubuntu3.4 AND samba DPKG is earlier than 2:3.2.3-1ubuntu3.4 AND swat DPKG is earlier than 2:3.2.3-1ubuntu3.4 AND samba-tools DPKG is earlier than 2:3.2.3-1ubuntu3.4 AND libsmbclient DPKG is earlier than 2:3.2.3-1ubuntu3.4 AND smbclient DPKG is earlier than 2:3.2.3-1ubuntu3.4 AND winbind DPKG is earlier than 2:3.2.3-1ubuntu3.4 AND libwbclient0 DPKG is earlier than 2:3.2.3-1ubuntu3.4 AND libpam-smbpass DPKG is earlier than 2:3.2.3-1ubuntu3.4 AND libsmbclient-dev DPKG is earlier than 2:3.2.3-1ubuntu3.4 AND samba-common DPKG is earlier than 2:3.2.3-1ubuntu3.4 AND samba-dbg DPKG is earlier than 2:3.2.3-1ubuntu3.4

Definition Id: oval:org.mitre.oval:def:13306

Oval ID:	oval:org.mitre.oval:def:13306
Title:	Ubuntu 8.10 is installed
Description:	Ubuntu 8.10 is installed
Family:	unix	Class:	inventory
Reference(s):	cpe:/o:ubuntu:ubuntu_linux:8.10	Version:	3
Platform(s):	Ubuntu 8.10	Product(s):
Definition Synopsis:
Ubuntu 8.10 is installed
Referenced By:
oval:org.mitre.oval:def:13986

Copyright Security-Database 2006-2025 - Powered by themself ;) in 0.0250s

Facebook rss twitter linkedin mail