Security Fix(es) :

  - A race condition was found in samba server. A malicious     samba client could use this flaw to access files and     directories in areas of the server file system not     exported under the share definitions. (CVE-2017-2619)

  - It was found that samba did not enforce 'SMB signing'     when certain configuration options were enabled. A     remote attacker could launch a man- in-the-middle attack     and retrieve information in plain-text. (CVE-2017-12150)

  - An information leak flaw was found in the way SMB1     protocol was implemented by Samba. A malicious client     could use this flaw to dump server memory contents to a     file on the samba share or to a shared printer, though     the exact area of server memory cannot be controlled by     the attacker. (CVE-2017-12163)

This update for samba fixes several issues. These security issues were fixed :

  - CVE-2017-12163: Prevent client short SMB1 write from     writing server memory to file, leaking information from     the server to the client (bsc#1058624).

  - CVE-2017-12150: Always enforce smb signing when it is     configured (bsc#1058622).

  - CVE-2017-12151: Keep required encryption across SMB3 dfs     redirects (bsc#1058565).

The update package also includes non-security fixes. See advisory for details.

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security fix for CVE-2017-12150 CVE-2017-12151 CVE-2017-12163

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - cifs-utils: stack-based buffer overflow flaw in pam_cifscreds (CVE-2014-2830)

  - samba: symlink race permits opening files outside share directory (CVE-2017-2619)

  - mount.cifs in cifs-utils 2.6 allows local users to determine the existence of arbitrary files or     directories via the file path in the second argument, which reveals their existence in an error message.
    (CVE-2012-1586)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

An update for samba4 is now available for Red Hat Enterprise Linux 6.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Samba is an open source implementation of the Server Message Block (SMB) or Common Internet File System (CIFS) protocol, which allows PC-compatible machines to share files, printers, and other information.

Security Fix(es) :

* It was found that samba did not enforce 'SMB signing' when certain configuration options were enabled. A remote attacker could launch a man-in-the-middle attack and retrieve information in plain-text.
(CVE-2017-12150)

* An information leak flaw was found in the way SMB1 protocol was implemented by Samba. A malicious client could use this flaw to dump server memory contents to a file on the samba share or to a shared printer, though the exact area of server memory cannot be controlled by the attacker. (CVE-2017-12163)

Red Hat would like to thank the Samba project for reporting CVE-2017-12150 and Yihan Lian and Zhibin Hu (Qihoo 360 GearTeam), Stefan Metzmacher (SerNet), and Jeremy Allison (Google) for reporting CVE-2017-12163. Upstream acknowledges Stefan Metzmacher (SerNet) as the original reporter of CVE-2017-12150.

Note that Tenable Network Security has attempted to extract the preceding description block directly from the corresponding Red Hat security advisory. Virtuozzo provides no description for VZLSA advisories. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for samba fixes the following issues :

Security issues fixed :

  - CVE-2017-14746: Use-after-free vulnerability     (bsc#1060427).

  - CVE-2017-15275: Server heap memory information leak     (bsc#1063008).

  - CVE-2017-12163: Prevent client short SMB1 write from     writing server memory to file (bsc#1058624).

  - CVE-2017-12151: Keep required encryption across SMB3 dfs     redirects (bsc#1058565).

  - CVE-2017-12150: Some code path don't enforce smb signing     when they should (bsc#1058565).

Bug fixes :

  - Samba was updated to 4.6.9 (bsc#1065066) see release     notes for details.

  - https://www.samba.org/samba/history/samba-4.6.9.html

This update was imported from the SUSE:SLE-12-SP3:Update update project.

An update for samba4 is now available for Red Hat Enterprise Linux 6.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Samba is an open source implementation of the Server Message Block (SMB) or Common Internet File System (CIFS) protocol, which allows PC-compatible machines to share files, printers, and other information.

Security Fix(es) :

* It was found that samba did not enforce 'SMB signing' when certain configuration options were enabled. A remote attacker could launch a man-in-the-middle attack and retrieve information in plain-text.
(CVE-2017-12150)

* An information leak flaw was found in the way SMB1 protocol was implemented by Samba. A malicious client could use this flaw to dump server memory contents to a file on the samba share or to a shared printer, though the exact area of server memory cannot be controlled by the attacker. (CVE-2017-12163)

Red Hat would like to thank the Samba project for reporting CVE-2017-12150 and Yihan Lian and Zhibin Hu (Qihoo 360 GearTeam), Stefan Metzmacher (SerNet), and Jeremy Allison (Google) for reporting CVE-2017-12163. Upstream acknowledges Stefan Metzmacher (SerNet) as the original reporter of CVE-2017-12150.

An update for samba is now available for Red Hat Enterprise Linux 6.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Samba is an open source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.

Security Fix(es) :

* A race condition was found in samba server. A malicious samba client could use this flaw to access files and directories in areas of the server file system not exported under the share definitions.
(CVE-2017-2619)

* It was found that samba did not enforce 'SMB signing' when certain configuration options were enabled. A remote attacker could launch a man-in-the-middle attack and retrieve information in plain-text.
(CVE-2017-12150)

* An information leak flaw was found in the way SMB1 protocol was implemented by Samba. A malicious client could use this flaw to dump server memory contents to a file on the samba share or to a shared printer, though the exact area of server memory cannot be controlled by the attacker. (CVE-2017-12163)

Red Hat would like to thank the Samba project for reporting CVE-2017-2619 and CVE-2017-12150 and Yihan Lian and Zhibin Hu (Qihoo 360 GearTeam), Stefan Metzmacher (SerNet), and Jeremy Allison (Google) for reporting CVE-2017-12163. Upstream acknowledges Jann Horn (Google) as the original reporter of CVE-2017-2619; and Stefan Metzmacher (SerNet) as the original reporter of CVE-2017-12150.

Multiple security issues have been discoverd in Samba, a SMB/CIFS file, print, and login server for Unix :

  - CVE-2017-12150     Stefan Metzmacher discovered multiple code paths where     SMB signing was not enforced.

  - CVE-2017-12151     Stefan Metzmacher discovered that tools using     libsmbclient did not enforce encryption when following     DFS redirects, which could allow a man-in-the-middle     attacker to read or modify connections which were meant     to be encrypted.

  - CVE-2017-12163     Yihan Lian and Zhibin Hu discovered that insufficient     range checks in the processing of SMB1 write requests     could result in disclosure of server memory.

From Red Hat Security Advisory 2017:2789 :

An update for samba is now available for Red Hat Enterprise Linux 6.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Samba is an open source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.

Security Fix(es) :

* A race condition was found in samba server. A malicious samba client could use this flaw to access files and directories in areas of the server file system not exported under the share definitions.
(CVE-2017-2619)

* It was found that samba did not enforce 'SMB signing' when certain configuration options were enabled. A remote attacker could launch a man-in-the-middle attack and retrieve information in plain-text.
(CVE-2017-12150)

* An information leak flaw was found in the way SMB1 protocol was implemented by Samba. A malicious client could use this flaw to dump server memory contents to a file on the samba share or to a shared printer, though the exact area of server memory cannot be controlled by the attacker. (CVE-2017-12163)

Red Hat would like to thank the Samba project for reporting CVE-2017-2619 and CVE-2017-12150 and Yihan Lian and Zhibin Hu (Qihoo 360 GearTeam), Stefan Metzmacher (SerNet), and Jeremy Allison (Google) for reporting CVE-2017-12163. Upstream acknowledges Jann Horn (Google) as the original reporter of CVE-2017-2619; and Stefan Metzmacher (SerNet) as the original reporter of CVE-2017-12150.

According to the versions of the samba packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - It was found that samba did not enforce 'SMB signing'     when certain configuration options were enabled. A     remote attacker could launch a man-in-the-middle attack     and retrieve information in plain-text.
    (CVE-2017-12150)

  - A flaw was found in the way samba client used     encryption with the max protocol set as SMB3. The     connection could lose the requirement for signing and     encrypting to any DFS redirects, allowing an attacker     to read or alter the contents of the connection via a     man-in-the-middle attack. (CVE-2017-12151)

  - An information leak flaw was found in the way SMB1     protocol was implemented by Samba. A malicious client     could use this flaw to dump server memory contents to a     file on the samba share or to a shared printer, though     the exact area of server memory cannot be controlled by     the attacker. (CVE-2017-12163)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for samba fixes several issues. These security issues were fixed :

  - CVE-2017-12163: Prevent client short SMB1 write from     writing server memory to file, leaking information from     the server to the client (bsc#1058624)

  - CVE-2017-12150: Always enforce smb signing when it is     configured (bsc#1058622)

  - CVE-2017-12151: Keep required encryption across SMB3 dfs     redirects (bsc#1058565)

The update package also includes non-security fixes. See advisory for details.

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for samba fixes several issues. These security issues were fixed :

  - CVE-2017-12163: Prevent client short SMB1 write from     writing server memory to file, leaking information from     the server to the client (bsc#1058624)

  - CVE-2017-12150: Always enforce smb signing when it is     configured (bsc#1058622)

The update package also includes non-security fixes. See advisory for details.

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
103501	Scientific Linux Security Update : samba on SL6.x i386/x86_64 (20170921)	Nessus	Scientific Linux Local Security Checks	2017/9/27	2021/1/14	high
103854	SUSE SLES12 Security Update : samba (SUSE-SU-2017:2726-1)	Nessus	SuSE Local Security Checks	2017/10/16	2021/1/6	high
103893	Fedora 25 : 2:samba (2017-581be259ef)	Nessus	Fedora Local Security Checks	2017/10/18	2021/1/6	high
199740	RHEL 5 : samba (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	2024/6/3	2024/6/4	high
119227	Virtuozzo 6 : samba4 / samba4-client / samba4-common / samba4-dc / etc (VZLSA-2017-2791)	Nessus	Virtuozzo Local Security Checks	2018/11/27	2021/1/4	high
105218	openSUSE Security Update : samba (openSUSE-2017-1316)	Nessus	SuSE Local Security Checks	2017/12/14	2021/1/19	critical
103387	CentOS 6 : samba4 (CESA-2017:2791)	Nessus	CentOS Local Security Checks	2017/9/22	2021/1/4	high
103406	RHEL 6 : samba (RHSA-2017:2789)	Nessus	Red Hat Local Security Checks	2017/9/22	2019/10/24	high
103432	Debian DSA-3983-1 : samba - security update	Nessus	Debian Local Security Checks	2017/9/25	2021/1/4	high
103434	Fedora 26 : 2:samba (2017-5a0a31c04e)	Nessus	Fedora Local Security Checks	2017/9/25	2021/1/6	high
103489	Oracle Linux 6 : samba (ELSA-2017-2789)	Nessus	Oracle Linux Local Security Checks	2017/9/27	2021/1/14	high
103735	EulerOS 2.0 SP1 : samba (EulerOS-SA-2017-1233)	Nessus	Huawei Local Security Checks	2017/10/10	2021/1/6	high
103770	SUSE SLED12 / SLES12 Security Update : samba (SUSE-SU-2017:2695-1)	Nessus	SuSE Local Security Checks	2017/10/11	2021/1/6	high
103832	SUSE SLES11 Security Update : samba (SUSE-SU-2017:2715-1)	Nessus	SuSE Local Security Checks	2017/10/13	2021/1/19	high

検出

プラグインの検索

high

high

high

high

high

critical

high

high

high

high

high

high

high

high