A flaw was found in the way Samba handled file descriptors. If an attacker were able to open a large number of file descriptors on the Samba server, they could flip certain stack bits to '1' values, resulting in the Samba server (smbd) crashing. (CVE-2011-0719)

After installing this update, the smb service will be restarted automatically.

The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2011-78:01 advisory.

    Samba is the suite of programs by which a lot of PC-related machines share files, printers, and other     information (such as lists of available files and printers). The Windows NT, OS/2, and Linux operating     systems support this natively, and add-on packages can enable the same thing for DOS, Windows, VMS, UNIX     of all kinds, MVS, and more. This package provides an SMB server that can be used to provide network     services to SMB (sometimes called Lan Manager) clients. Samba uses NetBIOS over TCP/IP (NetBT) protocols     and does NOT need the NetBEUI (Microsoft Raw NetBIOS frame) protocol.
    Security issues fixed with this release:
    CVE-2011-0719     Samba 3.x before 3.3.15, 3.4.x before 3.4.12, and 3.5.x before 3.5.7 does not perform range checks for     file descriptors before use of the FD_SET macro, which allows remote attackers to cause a denial of     service (stack memory corruption, and infinite loop or daemon crash) by opening a large number of files,     related to (1) Winbind or (2) smbd.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote host is running a version of Mac OS X 10.5 that does not have Security Update 2011-004 applied. This update contains security- related fixes for the following components :

  - AirPort
  - App Store
  - ColorSync
  - CoreGraphics
  - ImageIO
  - Libsystem
  - libxslt
  - MySQL
  - patch
  - Samba
  - servermgrd
  - subversion

The remote host is affected by the vulnerability described in GLSA-201206-22 (Samba: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Samba. Please review       the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could possibly execute arbitrary code with root       privileges, cause a Denial of Service condition, take ownership of shared       files, or bypass file permissions. Furthermore, a local attacker may be       able to cause a Denial of Service condition or obtain sensitive       information in a Samba credentials file.
  Workaround :

    There is no known workaround at this time.

With this update samba is not prone to a remote denial of service attack anymore. (CVE-2011-0719)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-0305 advisory.

    - Security Release, fixes CVE-2011-0719

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-0306 advisory.

    - Security Release, fixes CVE-2011-0719

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
60972	Scientific Linux Security Update : samba on SL4.x, SL5.x i386/x86_64	Nessus	Scientific Linux Local Security Checks	2012/8/1	2021/1/14	medium
284486	MiracleLinux 4 : samba-3.5.4-68.AXS4.2 (AXSA:2011-78:01)	Nessus	Miracle Linux Local Security Checks	2026/1/14	2026/1/14	medium
55415	Mac OS X Multiple Vulnerabilities (Security Update 2011-004)	Nessus	MacOS X Local Security Checks	2011/6/24	2024/5/28	high
59675	GLSA-201206-22 : Samba: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2012/6/25	2021/1/6	critical
75447	openSUSE Security Update : cifs-mount (openSUSE-SU-2011:0403-1)	Nessus	SuSE Local Security Checks	2014/6/13	2021/1/14	medium
53589	SuSE 10 Security Update : Samba (ZYPP Patch Number 7353)	Nessus	SuSE Local Security Checks	2011/4/29	2021/1/19	medium
57165	SuSE 10 Security Update : Samba (ZYPP Patch Number 7396)	Nessus	SuSE Local Security Checks	2011/12/13	2021/1/19	medium
68208	Oracle Linux 5 / 6 : samba (ELSA-2011-0305)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2024/10/22	high
68209	Oracle Linux 5 : samba3x (ELSA-2011-0306)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2024/10/22	high

検出

プラグインの検索

medium

medium

high

critical

medium

medium

medium

high

high