Oval Definition:	oval:org.mitre.oval:def:7515
Revision Date: 2015-02-23 Version: 22 Title: DSA-2004 samba -- several vulnerabilities Description: Two local vulnerabilities have been discovered in samba, a SMB/CIFS file, print, and login server for Unix. The Common Vulnerabilities and Exposures project identifies the following problems: Ronald Volgers discovered that a race condition in mount.cifs allows local users to mount remote filesystems over arbitrary mount points. Jeff Layton discovered that missing input sanitising in mount.cifs allows denial of service by corrupting /etc/mtab. Family: unix Class: patch Status: ACCEPTED Reference(s): CVE-2009-3297 CVE-2010-0547 DSA-2004 Platform(s): Debian GNU/Linux 5.0 Product(s): samba Definition Synopsis Debian GNU/Linux 5.0 is installed AND Architecture section Architecture independent section Installed architecture is all AND Packages section samba-doc is earlier than 2:3.2.5-4lenny9 OR samba-doc-pdf is earlier than 2:3.2.5-4lenny9 OR Architecture dependent section Supported architectures section Installed architecture is amd64 OR Installed architecture is sparc OR Installed architecture is arm OR Installed architecture is i386 OR Installed architecture is armel OR Installed architecture is mips OR Installed architecture is ia64 OR Installed architecture is alpha OR Installed architecture is powerpc OR Installed architecture is mipsel OR Installed architecture is hppa AND Packages section smbfs is earlier than 2:3.2.5-4lenny9 OR samba is earlier than 2:3.2.5-4lenny9 OR samba-tools is earlier than 2:3.2.5-4lenny9 OR libsmbclient is earlier than 2:3.2.5-4lenny9 OR smbclient is earlier than 2:3.2.5-4lenny9 OR libwbclient0 is earlier than 2:3.2.5-4lenny9 OR swat is earlier than 2:3.2.5-4lenny9 OR winbind is earlier than 2:3.2.5-4lenny9 OR samba-dbg is earlier than 2:3.2.5-4lenny9 OR libsmbclient-dev is earlier than 2:3.2.5-4lenny9 OR samba-common is earlier than 2:3.2.5-4lenny9 OR libpam-smbpass is earlier than 2:3.2.5-4lenny9
BACK