Test Kennung:	1.3.6.1.4.1.25623.1.0.120624
Kategorie:	Amazon Linux Local Security Checks
Titel:	Amazon Linux: Security Advisory (ALAS-2016-634)
Zusammenfassung:	The remote host is missing an update announced via the referenced Security Advisory.
Beschreibung:	Summary: The remote host is missing an update announced via the referenced Security Advisory. Vulnerability Insight: A missing access control flaw was found in Samba. A remote, authenticated attacker could use this flaw to view the current snapshot on a Samba share, despite not having DIRECTORY_LIST access rights.An access flaw was found in the way Samba verified symbolic links when creating new files on a Samba share. A remote attacker could exploit this flaw to gain access to files outside of Samba's share path. A memory-read flaw was found in the way the libldb library processed LDB DN records with a null byte. An authenticated, remote attacker could use this flaw to read heap-memory pages from the server. A man-in-the-middle vulnerability was found in the way 'connection signing' was implemented by Samba. A remote attacker could use this flaw to downgrade an existing Samba client connection and force the use of plain text. Solution: Run yum update samba to update your system. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2015-5299 BugTraq ID: 79729 http://www.securityfocus.com/bid/79729 Debian Security Information: DSA-3433 (Google Search) http://www.debian.org/security/2016/dsa-3433 http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174391.html http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174076.html https://security.gentoo.org/glsa/201612-47 http://www.securitytracker.com/id/1034493 SuSE Security Announcement: SUSE-SU-2015:2304 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00019.html SuSE Security Announcement: SUSE-SU-2015:2305 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00020.html SuSE Security Announcement: SUSE-SU-2016:0032 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00002.html SuSE Security Announcement: SUSE-SU-2016:0164 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00017.html SuSE Security Announcement: openSUSE-SU-2015:2354 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00032.html SuSE Security Announcement: openSUSE-SU-2015:2356 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00033.html SuSE Security Announcement: openSUSE-SU-2016:1064 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html SuSE Security Announcement: openSUSE-SU-2016:1106 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html SuSE Security Announcement: openSUSE-SU-2016:1107 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html http://www.ubuntu.com/usn/USN-2855-1 http://www.ubuntu.com/usn/USN-2855-2 Common Vulnerability Exposure (CVE) ID: CVE-2015-5252 BugTraq ID: 79733 http://www.securityfocus.com/bid/79733 SuSE Security Announcement: SUSE-SU-2016:1105 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00046.html Common Vulnerability Exposure (CVE) ID: CVE-2015-5330 BugTraq ID: 79734 http://www.securityfocus.com/bid/79734 http://www.ubuntu.com/usn/USN-2856-1 Common Vulnerability Exposure (CVE) ID: CVE-2015-5296 BugTraq ID: 79732 http://www.securityfocus.com/bid/79732
Copyright	Copyright (C) 2016 Eero Volotinen

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.