A flaw was found in the way Samba handled file descriptors. If an attacker were able to open a large number of file descriptors on the Samba server, they could flip certain stack bits to '1' values, resulting in the Samba server (smbd) crashing. (CVE-2011-0719)

After installing this update, the smb service will be restarted automatically.

The remote Redhat Enterprise Linux 4 / 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2011:0305 advisory.

  - Samba unsafe fd_set usage (CVE-2011-0719)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Updated samba packages that fix one security issue are now available for Red Hat Enterprise Linux 4, 5, and 6.

The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.

Samba is a suite of programs used by machines to share files, printers, and other information.

A flaw was found in the way Samba handled file descriptors. If an attacker were able to open a large number of file descriptors on the Samba server, they could flip certain stack bits to '1' values, resulting in the Samba server (smbd) crashing. (CVE-2011-0719)

Red Hat would like to thank the Samba team for reporting this issue.

Users of Samba are advised to upgrade to these updated packages, which contain a backported patch to resolve this issue. After installing this update, the smb service will be restarted automatically.

Updated samba3x packages that fix one security issue are now available for Red Hat Enterprise Linux 5.

The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.

Samba is a suite of programs used by machines to share files, printers, and other information.

A flaw was found in the way Samba handled file descriptors. If an attacker were able to open a large number of file descriptors on the Samba server, they could flip certain stack bits to '1' values, resulting in the Samba server (smbd) crashing. (CVE-2011-0719)

Red Hat would like to thank the Samba team for reporting this issue.

Users of Samba are advised to upgrade to these updated packages, which contain a backported patch to resolve this issue. After installing this update, the smb service will be restarted automatically.

- Tue Mar 8 2011 Guenther Deschner <gdeschner at     redhat.com> - 3.5.8-74

    - Update to 3.5.8

    - resolves: #596830

    - Thu Mar 3 2011 Guenther Deschner <gdeschner at       redhat.com> - 3.5.7-73

    - Security update to 3.5.7 to address CVE-2011-0719

    - resolves: #681852

    - Thu Jan 6 2011 Guenther Deschner <gdeschner at       redhat.com> - 3.5.6-72

    - Fix GSSAPI checksum for some SMB servers

    - resolves: #667647

    - Mon Nov 22 2010 Guenther Deschner <gdeschner at       redhat.com> - 3.5.6-71

    - Handle no network case in init scripts

    - resolves: #655766

    - Thu Nov 18 2010 Guenther Deschner <gdeschner at       redhat.com> - 3.5.6-70

    - Fix libsmbclient SMB signing

    - resolves: #654408

    - Fri Oct 8 2010 Guenther Deschner <gdeschner at       redhat.com> - 3.5.6-69

    - Update to 3.5.6

    - resolves: #617771

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Volker Lendecke discovered that missing range checks in Samba's file descriptor handling could lead to memory corruption, resulting in denial of service.

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2011:0306 advisory.

    Samba is a suite of programs used by machines to share files, printers, and     other information.

    A flaw was found in the way Samba handled file descriptors. If an attacker     were able to open a large number of file descriptors on the Samba server,     they could flip certain stack bits to 1 values, resulting in the Samba     server (smbd) crashing. (CVE-2011-0719)

    Red Hat would like to thank the Samba team for reporting this issue.

    Users of Samba are advised to upgrade to these updated packages, which     contain a backported patch to resolve this issue. After installing this     update, the smb service will be restarted automatically.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

With this update samba is not prone to a remote denial of service attack anymore. (CVE-2011-0719)

The remote host is running a version of Mac OS X 10.6.x that is prior to 10.6.8. This update contains security-related fixes for the following components :

  - App Store
  - ATS
  - Certificate Trust Policy
  - CoreFoundation
  - CoreGraphics
  - FTP Server
  - ImageIO
  - International Components for Unicode
  - Kernel
  - Libsystem
  - libxslt
  - MobileMe
  - MySQL
  - OpenSSL
  - patch
  - QuickLook
  - QuickTime
  - Samba
  - servermgrd
  - subversion

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
60971	Scientific Linux Security Update : samba3x on SL5.x i386/x86_64	Nessus	Scientific Linux Local Security Checks	2012/8/1	2021/1/14	medium
52489	RHEL 4 / 5 / 6 : samba (RHSA-2011:0305)	Nessus	Red Hat Local Security Checks	2011/3/2	2024/4/21	high
52505	CentOS 4 / 5 : samba (CESA-2011:0305)	Nessus	CentOS Local Security Checks	2011/3/3	2021/1/4	medium
53423	CentOS 5 : samba3x (CESA-2011:0306)	Nessus	CentOS Local Security Checks	2011/4/15	2021/1/4	medium
52722	Fedora 14 : samba-3.5.8-74.fc14 (2011-3118)	Nessus	Fedora Local Security Checks	2011/3/21	2021/1/11	medium
52463	Debian DSA-2175-1 : samba - missing input sanitising	Nessus	Debian Local Security Checks	2011/3/1	2021/1/4	medium
52490	RHEL 5 : samba3x (RHSA-2011:0306)	Nessus	Red Hat Local Security Checks	2011/3/2	2024/11/4	high
53700	openSUSE Security Update : cifs-mount (openSUSE-SU-2011:0403-1)	Nessus	SuSE Local Security Checks	2011/5/5	2021/1/14	medium
55416	Mac OS X 10.6.x < 10.6.8 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	2011/6/24	2018/8/22	critical

检测

插件搜索

medium

high

medium

medium

medium

medium

high

medium

critical