Oval Definition:	oval:org.mitre.oval:def:23855
Revision Date: 2014-05-26 Version: 22 Title: ELSA-2013:1806: samba and samba3x security update (Important) Description: Samba 3.x before 3.6.20, 4.0.x before 4.0.11, and 4.1.x before 4.1.1, when vfs_streams_depot or vfs_streams_xattr is enabled, allows remote attackers to bypass intended file restrictions by leveraging ACL differences between a file and an associated alternate data stream (ADS). Family: unix Class: patch Status: ACCEPTED Reference(s): CVE-2013-4408 CVE-2013-4475 ELSA-2013:1806-00 Platform(s): Oracle Linux 5 Oracle Linux 6 Product(s): samba samba3x Definition Synopsis rpm test Oracle Linux 5.x AND rpm test samba3x is earlier than 0:3.6.6-0.138.el5_10 OR samba3x-common is earlier than 0:3.6.6-0.138.el5_10 OR samba3x-winbind is earlier than 0:3.6.6-0.138.el5_10 OR samba3x-doc is earlier than 0:3.6.6-0.138.el5_10 OR samba3x-swat is earlier than 0:3.6.6-0.138.el5_10 OR samba3x-domainjoin-gui is earlier than 0:3.6.6-0.138.el5_10 OR samba3x-client is earlier than 0:3.6.6-0.138.el5_10 OR samba3x-winbind-devel is earlier than 0:3.6.6-0.138.el5_10 OR rpm test Oracle Linux 6.x AND rpm test samba-common is earlier than 0:3.6.9-167.el6_5 OR samba is earlier than 0:3.6.9-167.el6_5 OR samba-winbind-clients is earlier than 0:3.6.9-167.el6_5 OR samba-winbind is earlier than 0:3.6.9-167.el6_5 OR samba-client is earlier than 0:3.6.9-167.el6_5 OR samba-doc is earlier than 0:3.6.9-167.el6_5 OR libsmbclient is earlier than 0:3.6.9-167.el6_5 OR samba-swat is earlier than 0:3.6.9-167.el6_5 OR samba-winbind-devel is earlier than 0:3.6.9-167.el6_5 OR samba-winbind-krb5-locator is earlier than 0:3.6.9-167.el6_5 OR samba-domainjoin-gui is earlier than 0:3.6.9-167.el6_5 OR libsmbclient-devel is earlier than 0:3.6.9-167.el6_5
BACK