The remote host is running a version of Mac OS X 10.6.x that is prior to 10.6.8. This update contains security-related fixes for the following components :

  - App Store
  - ATS
  - Certificate Trust Policy
  - CoreFoundation
  - CoreGraphics
  - FTP Server
  - ImageIO
  - International Components for Unicode
  - Kernel
  - Libsystem
  - libxslt
  - MobileMe
  - MySQL
  - OpenSSL
  - patch
  - QuickLook
  - QuickTime
  - Samba
  - servermgrd
  - subversion

A flaw was found in the way Samba handled file descriptors. If an attacker were able to open a large number of file descriptors on the Samba server, they could flip certain stack bits to '1' values, resulting in the Samba server (smbd) crashing. (CVE-2011-0719)

After installing this update, the smb service will be restarted automatically.

A vulnerability has been found and corrected in samba :

All current released versions of Samba are vulnerable to a denial of service caused by memory corruption. Range checks on file descriptors being used in the FD_SET macro were not present allowing stack corruption. This can cause the Samba code to crash or to loop attempting to select on a bad file descriptor set (CVE-2011-0719).

Packages for 2009.0 are provided as of the Extended Maintenance Program. Please visit this link to learn more:
http://store.mandriva.com/product_info.php?cPath=149 products_id=490

The updated packages have been patched to correct this issue.

Volker Lendecke discovered that Samba incorrectly handled certain file descriptors. A remote attacker could send a specially crafted request to the server and cause Samba to crash or hang, resulting in a denial of service.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 4 / 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2011:0305 advisory.

  - Samba unsafe fd_set usage (CVE-2011-0719)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

- Tue Mar 8 2011 Guenther Deschner <gdeschner at     redhat.com> - 3.5.8-74

    - Update to 3.5.8

    - resolves: #617482

    - Thu Mar 3 2011 Guenther Deschner <gdeschner at       redhat.com> - 3.5.7-73

    - Security update to 3.5.7 to address CVE-2011-0719

    - resolves: #681852

    - Thu Jan 6 2011 Guenther Deschner <gdeschner at       redhat.com> - 3.5.6-72

    - Fix GSSAPI checksum for some SMB servers

    - resolves: #667644

    - Thu Nov 18 2010 Guenther Deschner <gdeschner at       redhat.com> - 3.5.6-71

    - Fix libsmbclient SMB signing

    - resolves: #598620

    - Mon Nov 1 2010 Guenther Deschner <gdeschner at       redhat.com> - 3.5.6-70

    - Handle no network case in init scripts

    - resolves: #604147

    - Fri Oct 8 2010 Guenther Deschner <gdeschner at       redhat.com> - 3.5.6-69

    - Update to 3.5.6

    - resolves: #617771

    - Thu Sep 9 2010 Guenther Deschner <gdeschner at       redhat.com> - 3.5.5-68

    - Security Release, fixes CVE-2010-3069

    - resolves: #630869

    - Thu Aug 26 2010 Guenther Deschner <gdeschner at       redhat.com> - 3.5.4-67

    - Put winbind krb5 locator plugin into a separate rpm

    - resolves: #627181

    - Tue Aug 24 2010 Guenther Deschner <gdeschner at       redhat.com> - 3.5.4-66

    - More fixes for winbind schannel

    - Thu Aug 19 2010 Guenther Deschner <gdeschner at       redhat.com> - 3.5.4-65

    - Fix winbind default domain

    - related: #618201

    - Wed Aug 18 2010 Guenther Deschner <gdeschner at       redhat.com> - 3.5.4-64

    - Fix offline authentication

    - resolves: #618201

    - Tue Aug 10 2010 Guenther Deschner <gdeschner at       redhat.com> - 3.5.4-63

    - Fix winbind secure channel (samlogonex)

    - Wed Jun 23 2010 Guenther Deschner <gdeschner at       redhat.com> - 3.5.4-62

    - Update to 3.5.4

    - Wed May 19 2010 Guenther Deschner <gdeschner at       redhat.com> - 3.5.3-61

    - Update to 3.5.3

    - Make sure nmb and smb initscripts return LSB compliant       return codes

    - Fix winbind over ipv6

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

With this update samba is not prone to a remote denial of service attack anymore. (CVE-2011-0719)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-0305 advisory.

    - Security Release, fixes CVE-2011-0719

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-0306 advisory.

    - Security Release, fixes CVE-2011-0719

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
55416	Mac OS X 10.6.x < 10.6.8 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	2011/6/24	2018/8/22	critical
60971	Scientific Linux Security Update : samba3x on SL5.x i386/x86_64	Nessus	Scientific Linux Local Security Checks	2012/8/1	2021/1/14	medium
52469	Mandriva Linux Security Advisory : samba (MDVSA-2011:038)	Nessus	Mandriva Local Security Checks	2011/3/1	2021/1/6	medium
52477	Ubuntu 6.06 LTS / 8.04 LTS / 9.10 / 10.04 LTS / 10.10 : samba vulnerability (USN-1075-1)	Nessus	Ubuntu Local Security Checks	2011/3/1	2019/9/19	medium
52489	RHEL 4 / 5 / 6 : samba (RHSA-2011:0305)	Nessus	Red Hat Local Security Checks	2011/3/2	2024/4/21	high
52723	Fedora 13 : samba-3.5.8-74.fc13 (2011-3120)	Nessus	Fedora Local Security Checks	2011/3/21	2021/1/11	medium
75447	openSUSE Security Update : cifs-mount (openSUSE-SU-2011:0403-1)	Nessus	SuSE Local Security Checks	2014/6/13	2021/1/14	medium
68208	Oracle Linux 5 / 6 : samba (ELSA-2011-0305)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2024/10/22	high
68209	Oracle Linux 5 : samba3x (ELSA-2011-0306)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2024/10/22	high
57165	SuSE 10 Security Update : Samba (ZYPP Patch Number 7396)	Nessus	SuSE Local Security Checks	2011/12/13	2021/1/19	medium
53589	SuSE 10 Security Update : Samba (ZYPP Patch Number 7353)	Nessus	SuSE Local Security Checks	2011/4/29	2021/1/19	medium

検出

プラグインの検索

critical

medium

medium

medium

high

medium

medium

high

high

medium

medium