Volker Lendecke discovered that Samba incorrectly handled certain file descriptors. A remote attacker could send a specially crafted request to the server and cause Samba to crash or hang, resulting in a denial of service.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 4 / 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2011:0305 advisory.

  - Samba unsafe fd_set usage (CVE-2011-0719)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

- Tue Mar 8 2011 Guenther Deschner <gdeschner at     redhat.com> - 3.5.8-74

    - Update to 3.5.8

    - resolves: #617482

    - Thu Mar 3 2011 Guenther Deschner <gdeschner at       redhat.com> - 3.5.7-73

    - Security update to 3.5.7 to address CVE-2011-0719

    - resolves: #681852

    - Thu Jan 6 2011 Guenther Deschner <gdeschner at       redhat.com> - 3.5.6-72

    - Fix GSSAPI checksum for some SMB servers

    - resolves: #667644

    - Thu Nov 18 2010 Guenther Deschner <gdeschner at       redhat.com> - 3.5.6-71

    - Fix libsmbclient SMB signing

    - resolves: #598620

    - Mon Nov 1 2010 Guenther Deschner <gdeschner at       redhat.com> - 3.5.6-70

    - Handle no network case in init scripts

    - resolves: #604147

    - Fri Oct 8 2010 Guenther Deschner <gdeschner at       redhat.com> - 3.5.6-69

    - Update to 3.5.6

    - resolves: #617771

    - Thu Sep 9 2010 Guenther Deschner <gdeschner at       redhat.com> - 3.5.5-68

    - Security Release, fixes CVE-2010-3069

    - resolves: #630869

    - Thu Aug 26 2010 Guenther Deschner <gdeschner at       redhat.com> - 3.5.4-67

    - Put winbind krb5 locator plugin into a separate rpm

    - resolves: #627181

    - Tue Aug 24 2010 Guenther Deschner <gdeschner at       redhat.com> - 3.5.4-66

    - More fixes for winbind schannel

    - Thu Aug 19 2010 Guenther Deschner <gdeschner at       redhat.com> - 3.5.4-65

    - Fix winbind default domain

    - related: #618201

    - Wed Aug 18 2010 Guenther Deschner <gdeschner at       redhat.com> - 3.5.4-64

    - Fix offline authentication

    - resolves: #618201

    - Tue Aug 10 2010 Guenther Deschner <gdeschner at       redhat.com> - 3.5.4-63

    - Fix winbind secure channel (samlogonex)

    - Wed Jun 23 2010 Guenther Deschner <gdeschner at       redhat.com> - 3.5.4-62

    - Update to 3.5.4

    - Wed May 19 2010 Guenther Deschner <gdeschner at       redhat.com> - 3.5.3-61

    - Update to 3.5.3

    - Make sure nmb and smb initscripts return LSB compliant       return codes

    - Fix winbind over ipv6

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

A flaw was found in the way Samba handled file descriptors. If an attacker were able to open a large number of file descriptors on the Samba server, they could flip certain stack bits to '1' values, resulting in the Samba server (smbd) crashing. (CVE-2011-0719)

After installing this update, the smb service will be restarted automatically.

With this update samba is not prone to a remote denial of service attack anymore. (CVE-2011-0719)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-0305 advisory.

    - Security Release, fixes CVE-2011-0719

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-0306 advisory.

    - Security Release, fixes CVE-2011-0719

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
52477	Ubuntu 6.06 LTS / 8.04 LTS / 9.10 / 10.04 LTS / 10.10 : samba vulnerability (USN-1075-1)	Nessus	Ubuntu Local Security Checks	2011/3/1	2019/9/19	medium
52489	RHEL 4 / 5 / 6 : samba (RHSA-2011:0305)	Nessus	Red Hat Local Security Checks	2011/3/2	2024/4/21	high
52723	Fedora 13 : samba-3.5.8-74.fc13 (2011-3120)	Nessus	Fedora Local Security Checks	2011/3/21	2021/1/11	medium
60971	Scientific Linux Security Update : samba3x on SL5.x i386/x86_64	Nessus	Scientific Linux Local Security Checks	2012/8/1	2021/1/14	medium
53589	SuSE 10 Security Update : Samba (ZYPP Patch Number 7353)	Nessus	SuSE Local Security Checks	2011/4/29	2021/1/19	medium
57165	SuSE 10 Security Update : Samba (ZYPP Patch Number 7396)	Nessus	SuSE Local Security Checks	2011/12/13	2021/1/19	medium
68208	Oracle Linux 5 / 6 : samba (ELSA-2011-0305)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2024/10/22	high
68209	Oracle Linux 5 : samba3x (ELSA-2011-0306)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2024/10/22	high
75447	openSUSE Security Update : cifs-mount (openSUSE-SU-2011:0403-1)	Nessus	SuSE Local Security Checks	2014/6/13	2021/1/14	medium

检测

插件搜索

medium

high

medium

medium

medium

medium

high

high

medium