This update of the Samba server package fixes security issues and bugs.

Following security issues were fixed: CVE-2010-2063: A buffer overrun was possible in chain_reply code in 3.3.x and below, which could be used to crash the samba server or potentially execute code.

CVE-2010-0787: Take extra care that a mount point of mount.cifs isn't changed during mount.

Also the following bugs were fixed :

  - Honor 'interfaces' list in net ad dns register.
    (bnc#606947)

  - An uninitialized variable read could cause an smbd     crash; (bso#7254); (bnc#605935).

This update of the Samba server package fixes the following security issues :

  - A buffer overrun was possible in chain_reply code in     3.3.x and below, which could be used to crash the samba     server or potentially execute code. (CVE-2010-2063)

  - Take extra care that a mount point of mount.cifs does     not get changed during mount. (CVE-2010-0787)

Also, the following bugs have been fixed :

  - Honor interface list in net ads dns register.
    (bnc#606947)

  - An uninitialized variable read could cause smbd to crash     (bso#7254, bnc#605935).

The remote host is running a version of Mac OS X 10.6 or 10.5 that does not have Security Update 2010-005 applied. 

This security update contains fixes for the following products :

  - ATS
  - CFNetwork
  - ClamAV
  - CoreGraphics
  - libsecurity
  - PHP
  - Samba

According to its banner, the version of Samba running on the remote host is a version of 3.x before 3.3.13. Such versions are affected by a memory corruption vulnerability when handling specially crafted SMB1 packets.

By exploiting this flaw, a remote, unauthenticated attacker could crash the affected service or potentially execute arbitrary code subject to the privileges of the user running the affected application.

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2010-0488 advisory.

    - Security Release, fixes CVE-2010-2063
    - Security Release, fixes CVE-2010-2063

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
47570	openSUSE Security Update : cifs-mount (openSUSE-SU-2010:0346-1)	Nessus	SuSE Local Security Checks	2010/7/1	2021/1/14	high
50894	SuSE 11 Security Update : (SAT Patch Number 2544)	Nessus	SuSE Local Security Checks	2010/12/2	2021/1/14	high
48424	Mac OS X Multiple Vulnerabilities (Security Update 2010-005)	Nessus	MacOS X Local Security Checks	2010/8/24	2024/5/28	high
47036	Samba 3.x < 3.3.13 SMB1 Packet Chaining Memory Corruption	Nessus	Misc.	2010/6/17	2018/11/15	high
68051	Oracle Linux 5 : samba / and / samba3x (ELSA-2010-0488)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2024/10/22	critical

检测

插件搜索

high

high

high

high

critical