Test Kennung:	1.3.6.1.4.1.25623.1.0.100803
Kategorie:	Buffer overflow
Titel:	Samba SID Parsing Remote Buffer Overflow Vulnerability
Zusammenfassung:	Samba is prone to a remote stack-based buffer-overflow vulnerability; because it fails to properly bounds-check user-supplied data before; copying it to an insufficiently sized memory buffer.
Beschreibung:	Summary: Samba is prone to a remote stack-based buffer-overflow vulnerability because it fails to properly bounds-check user-supplied data before copying it to an insufficiently sized memory buffer. Vulnerability Impact: An attacker can exploit this issue to execute arbitrary code in the context of the affected application. Failed exploit attempts will likely result in a denial of service. Affected Software/OS: Samba versions prior to 3.5.5 are vulnerable. Solution: Updates are available. Please see the references for more information. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Querverweis:	BugTraq ID: 43212 Common Vulnerability Exposure (CVE) ID: CVE-2010-3069 http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html http://www.securityfocus.com/bid/43212 Bugtraq: 20101207 VMSA-2010-0019 VMware ESX third party updates for Service Console (Google Search) http://www.securityfocus.com/archive/1/515055/100/0/threaded http://lists.fedoraproject.org/pipermail/package-announce/2010-September/047650.html http://lists.fedoraproject.org/pipermail/package-announce/2010-September/047697.html http://lists.fedoraproject.org/pipermail/package-announce/2010-September/047758.html HPdes Security Advisory: HPSBUX02657 http://marc.info/?l=bugtraq&m=130835366526620&w=2 HPdes Security Advisory: SSRT100460 http://www.redhat.com/support/errata/RHSA-2010-0860.html http://www.securitytracker.com/id?1024434 http://secunia.com/advisories/41354 http://secunia.com/advisories/41447 http://secunia.com/advisories/42531 http://secunia.com/advisories/42885 SuSE Security Announcement: SUSE-SR:2010:018 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html SuSE Security Announcement: SUSE-SR:2010:019 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html http://www.ubuntu.com/usn/USN-987-1 http://www.vupen.com/english/advisories/2010/2378 http://www.vupen.com/english/advisories/2010/3126 http://www.vupen.com/english/advisories/2011/0091 XForce ISS Database: samba-sidparse-bo(61773) https://exchange.xforce.ibmcloud.com/vulnerabilities/61773
Copyright	This script is Copyright (C) 2010 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.