Anfälligkeitssuche        Suche in 219043 CVE Beschreibungen
und 99761 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.71331
Kategorie:Mandrake Local Security Checks
Titel:Mandriva Security Advisory MDVSA-2012:070 (samba)
Zusammenfassung:NOSUMMARY
Beschreibung:Description:
The remote host is missing an update to samba
announced via advisory MDVSA-2012:070.

A vulnerability has been found and corrected in samba:

A file existence dislosure flaw was found in the way mount.cifs tool
of the Samba SMB/CIFS tools suite performed mount of a Linux CIFS
(Common Internet File System) filesystem. A local user, able to
mount a remote CIFS share / target to a local directory could use
this flaw to confirm (non) existence of a file system object (file,
directory or process descriptor) via error messages generated during
the mount.cifs tool run (CVE-2012-1586).

The updated packages have been patched to correct this issue.

Affected: 2010.1, Enterprise Server 5.0

Solution:
To upgrade automatically use MandrakeUpdate or urpmi. The verification
of md5 checksums and GPG signatures is performed automatically for you.

http://www.securityspace.com/smysecure/catid.html?in=MDVSA-2012:070

Risk factor : High

Querverweis: Common Vulnerability Exposure (CVE) ID: CVE-2012-1586
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=665923
http://www.openwall.com/lists/oss-security/2012/03/27/1
http://www.openwall.com/lists/oss-security/2012/03/27/6
SuSE Security Announcement: SUSE-SU-2012:0575 (Google Search)
http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00024.html
CopyrightCopyright (c) 2012 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2024 E-Soft Inc. Alle Rechte vorbehalten.