The version of Samba running on the remote host is 3.5.x prior to 4.4.x, or it is 4.4.x prior to 4.4.14, 4.5.x prior to 4.5.10, or 4.6.x prior to 4.6.4. It is, therefore, affected by an unspecified remote code execution vulnerability. An authenticated, remote attacker can exploit this, via a specially crafted shared library uploaded to a writable share, to cause the server to load and execute arbitrary code with root privileges.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

USN-3296-1 fixed a vulnerability in Samba. This update provides the corresponding update for Ubuntu 12.04 ESM.

It was discovered that Samba incorrectly handled shared libraries. A remote attacker could use this flaw to upload a shared library to a writable share and execute arbitrary code.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-201805-07 (Samba: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Samba. Please review       the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could possibly execute arbitrary code, cause a Denial       of Service condition, conduct a man-in-the-middle attack, or obtain       sensitive information.
  Workaround :

    There is no known workaround at this time.

steelo discovered a remote code execution vulnerability in Samba, a SMB/CIFS file, print, and login server for Unix. A malicious client with access to a writable share, can take advantage of this flaw by uploading a shared library and then cause the server to load and execute it.

The remote NewStart CGSL host, running version MAIN 4.05, has samba4 packages installed that are affected by multiple vulnerabilities:

  - A flaw was found in the way Samba handled PAC (Privilege     Attribute Certificate) checksums. A remote,     authenticated attacker could use this flaw to crash the     winbindd process. (CVE-2016-2126)

  - It was found that Samba always requested forwardable     tickets when using Kerberos authentication. A service to     which Samba authenticated using Kerberos could     subsequently use the ticket to impersonate Samba to     other services or domain users. (CVE-2016-2125)

  - A remote code execution flaw was found in Samba. A     malicious authenticated samba client, having write     access to the samba share, could use this flaw to     execute arbitrary code as root. (CVE-2017-7494)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-1270 advisory.

    [3.6.23-43.0.1]
    - Remove use-after-free talloc_tos() inlined function problem (John Haxby) [orabug 18253258]

    [3.6.24-43]
    - resolves: #1450782 - Fix CVE-2017-7494

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-1271 advisory.

    [4.2.10-10]
    - resolves: #1450779 - Security fix for CVE-2017-7494

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update for samba4 is now available for Red Hat Enterprise Linux 6.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Samba is an open source implementation of the Server Message Block (SMB) or Common Internet File System (CIFS) protocol, which allows PC-compatible machines to share files, printers, and other information.

Security Fix(es) :

* A remote code execution flaw was found in Samba. A malicious authenticated samba client, having write access to the samba share, could use this flaw to execute arbitrary code as root. (CVE-2017-7494)

Red Hat would like to thank the Samba project for reporting this issue. Upstream acknowledges steelo as the original reporter.

Security Fix(es) :

  - A remote code execution flaw was found in Samba. A     malicious authenticated samba client, having write     access to the samba share, could use this flaw to     execute arbitrary code as root. (CVE-2017-7494)

An update for samba is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Samba is an open source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.

Security Fix(es) :

* A remote code execution flaw was found in Samba. A malicious authenticated samba client, having write access to the samba share, could use this flaw to execute arbitrary code as root. (CVE-2017-7494)

Red Hat would like to thank the Samba project for reporting this issue. Upstream acknowledges steelo as the original reporter.

This update for samba fixes the following issue :

  - An unprivileged user with access to the samba server     could cause smbd to load a specially crafted shared     library, which then had the ability to execute arbitrary     code on the server as 'root'. [CVE-2017-7494, bso#12780,     bsc#1038231]

This update was imported from SUSE:SLE-12-SP1:Update project.

NOTE: This update is released in openSUSE Leap 42.1 after its official End Of Life only because of its severity and potential impact for users that have not migrated yet.

Please upgrade your openSUSE Leap 42.1 as soon as possible.

A remote code execution flaw was found in Samba. A malicious authenticated

samba client, having write access to the samba share, could use this flaw to

execute arbitrary code as root. (CVE-2017-7494)

It was found that Samba always requested forwardable tickets when using Kerberos authentication. A service to which Samba authenticated using Kerberos could subsequently use the ticket to impersonate Samba to other services or domain users. (CVE-2016-2125)

A flaw was found in the way Samba handled PAC (Privilege Attribute Certificate) checksums. A remote, authenticated attacker could use this flaw to crash the winbindd process. (CVE-2016-2126)

A race condition was found in samba server. A malicious samba client could use this flaw to access files and directories, in areas of the server file system not exported under the share definitions.
(CVE-2017-2619)

An update for samba4 is now available for Red Hat Enterprise Linux 6.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Samba is an open source implementation of the Server Message Block (SMB) or Common Internet File System (CIFS) protocol, which allows PC-compatible machines to share files, printers, and other information.

Security Fix(es) :

* A remote code execution flaw was found in Samba. A malicious authenticated samba client, having write access to the samba share, could use this flaw to execute arbitrary code as root. (CVE-2017-7494)

Red Hat would like to thank the Samba project for reporting this issue. Upstream acknowledges steelo as the original reporter.

Note that Tenable Network Security has attempted to extract the preceding description block directly from the corresponding Red Hat security advisory. Virtuozzo provides no description for VZLSA advisories. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to its self-reported version number, the version of Junos Space running on the remote device is < 17.1R1, and is therefore affected by multiple vulnerabilities.

Versions of Samba 4.4.x prior to 4.4.14, 4.5.x prior to 4.5.10, and 4.6.x prior to 4.6.4 are unpatched, and therefore affected by a flaw in the 'is_known_pipename()' function in 'rpc_server/srv_pipe.c' that is due to the program failing to restrict users from accessing files as nt specific pipes. By uploading a shared library to a writable location, this may allow an authenticated, remote attacker to execute arbitrary code with root privileges.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
100388	Samba 3.5.x < 4.4 / 4.4.x < 4.4.14 / 4.5.x < 4.5.10 / 4.6.x < 4.6.4 Shared Library RCE	Nessus	Misc.	2017/5/24	2023/3/30	critical
100412	Ubuntu 12.04 LTS : samba vulnerability (USN-3296-2) (SambaCry)	Nessus	Ubuntu Local Security Checks	2017/5/25	2023/3/30	critical
109974	GLSA-201805-07 : Samba: Multiple vulnerabilities (SambaCry)	Nessus	Gentoo Local Security Checks	2018/5/23	2023/3/31	critical
100391	Debian DSA-3860-1 : samba - security update (SambaCry)	Nessus	Debian Local Security Checks	2017/5/25	2023/3/30	critical
127327	NewStart CGSL MAIN 4.05 : samba4 Multiple Vulnerabilities (NS-SA-2019-0100)	Nessus	NewStart CGSL Local Security Checks	2019/8/12	2023/3/30	critical
100396	Oracle Linux 6 / 7 : samba (ELSA-2017-1270)	Nessus	Oracle Linux Local Security Checks	2017/5/25	2024/11/1	critical
100397	Oracle Linux 6 : samba4 (ELSA-2017-1271)	Nessus	Oracle Linux Local Security Checks	2017/5/25	2024/10/23	critical
100401	RHEL 6 : samba4 (RHSA-2017:1271) (SambaCry)	Nessus	Red Hat Local Security Checks	2017/5/25	2023/3/30	critical
100403	Scientific Linux Security Update : samba on SL6.x, SL7.x i386/x86_64 (20170524) (SambaCry)	Nessus	Scientific Linux Local Security Checks	2017/5/25	2023/3/30	critical
100428	CentOS 6 / 7 : samba (CESA-2017:1270) (SambaCry)	Nessus	CentOS Local Security Checks	2017/5/26	2023/3/30	critical
100429	CentOS 6 : samba4 (CESA-2017:1271) (SambaCry)	Nessus	CentOS Local Security Checks	2017/5/26	2023/3/30	critical
100499	openSUSE Security Update : samba (openSUSE-2017-618) (SambaCry)	Nessus	SuSE Local Security Checks	2017/5/30	2023/3/30	critical
100554	Amazon Linux AMI : samba (ALAS-2017-834) (SambaCry)	Nessus	Amazon Linux Local Security Checks	2017/6/1	2023/3/30	critical
101473	Virtuozzo 6 : samba4 / samba4-client / samba4-common / samba4-dc / etc (VZLSA-2017-1271)	Nessus	Virtuozzo Local Security Checks	2017/7/13	2023/3/30	critical
104100	Juniper Junos Space < 17.1R1 Multiple Vulnerabilities (JSA10826)	Nessus	Junos Local Security Checks	2017/10/23	2023/3/30	critical
700127	Samba 4.4.x < 4.4.14 / 4.5.x < 4.5.10 / 4.6.x < 4.6.4 RCE (SambaCry)	Nessus Network Monitor	Samba	2017/5/26	2019/3/6	critical

检测

插件搜索

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical