ID de Prueba:	1.3.6.1.4.1.25623.1.0.123695
Categoría:	Oracle Linux Local Security Checks
Título:	Oracle: Security Advisory (ELSA-2013-0506)
Resumen:	The remote host is missing an update for the 'samba4' package(s) announced via the ELSA-2013-0506 advisory.
Descripción:	Summary: The remote host is missing an update for the 'samba4' package(s) announced via the ELSA-2013-0506 advisory. Vulnerability Insight: [4.0.0-55.rc4] - Fix dependencies of samba4-test package. - related: #896142 [4.0.0-54.rc4] - Fix summary and description of dc subpackages. - resolves: #896142 - Remove conflicting libsmbclient.7 manpage. - resolves: #896240 [4.0.0-53.rc4] - Fix provides filter rules to remove conflicting libraries from samba4-libs. - resolves: #895718 [4.0.0-52.rc4] - Fix typo in winbind-krb-locator post uninstall script. - related: #864889 [4.0.0-51.rc4] - Make sure we use the same directory as samba package for the winbind pipe. - resolves: #886157 [4.0.0-50.rc4] - Fix typo in winbind-krb-locator post uninstall script. - related: #864889 [4.0.0-49.rc4] - Fix Netlogon AES encryption. - resolves: #885089 [4.0.0-48.rc4] - Fix IPA trust AD lookup of users. - resolves: #878564 [4.0.0-47.rc4] - Add require for krb5-libs >= 1.10 to samba4-libs. - resolves: #877533 [4.0.0-46.rc4] - Rename /etc/sysconfig/samba4 to name to mach init scripts. - resolves: #877085 [4.0.0-45.rc4] - Don't require samba4-common and samba4-test in samba4-devel package. - related: #871748 [4.0.0-44.rc4] - Make libnetapi and internal library to fix dependencies. - resolves: #873491 [4.0.0-43.rc4] - Move libnetapi and internal printing migration lib to libs package. - related: #766333 [4.0.0-42.rc4] - Fix perl, pam and logrotate dependencies. - related: #766333 [4.0.0-41.rc4] - Fix library dependencies found by rpmdiff. - Update winbind offline logon patch. - related: #766333 [4.0.0-40.rc4] - Move libgpo to samba-common - resolves: #871748 [4.0.0-39.rc4] - Rebase to version 4.0.0rc4. - related: #766333 [4.0.0-38.rc3] - Add missing export KRB5CCNAME in init scripts. - resolves: #868419 [4.0.0-37.rc3] - Move /var/log/samba to samba-common package for winbind which requires it. - resolves: #868248 [4.0.0-36.rc3] - The standard auth modules need to be built into smbd to function. - resolves: #867854 [4.0.0-35.rc3] - Move pam_winbind.conf to the package of the module. - resolves: #867317 [4.0.0-34.rc3] - Built auth_builtin as static module. - related: #766333 [4.0.0-33.rc3] - Add back the AES patches which didn't make it in rc3. - related: #766333 [4.0.0-32.rc3] - Rebase to version 4.0.0rc3. - related: #766333 [4.0.0-31.rc2] - Use alternatives to configure winbind_krb5_locator.so - resolves: #864889 [4.0.0-30.rc2] - Fix multilib package installation. - resolves: #862047 - Filter out libsmbclient and libwbclient provides. - resolves: #861892 - Rebase to version 4.0.0rc2. - related: #766333 [4.0.0-29.rc1] - Fix Requires and Conflicts. - related: #766333 [4.0.0-28.rc1] - Move pam_winbind and wbinfo manpages to the right subpackage. - related: #766333 [4.0.0-27.rc1] - Fix permission for init scripts. - Define a common KRB5CCNAME for smbd and winbind. - Set piddir back to /var/run in RHEL6. - related: #766333 [4.0.0-26.rc1] - Add '-fno-strict-aliasing' to CFLAGS again. - related: ... [Please see the references for more information on the vulnerabilities] Affected Software/OS: 'samba4' package(s) on Oracle Linux 6. Solution: Please install the updated package(s). CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2012-1182 http://lists.apple.com/archives/security-announce/2012/May/msg00001.html Debian Security Information: DSA-2450 (Google Search) http://www.debian.org/security/2012/dsa-2450 http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078726.html http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078836.html http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078258.html http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080567.html HPdes Security Advisory: HPSBMU02790 http://marc.info/?l=bugtraq&m=133951282306605&w=2 HPdes Security Advisory: HPSBUX02789 http://marc.info/?l=bugtraq&m=134323086902585&w=2 HPdes Security Advisory: SSRT100824 HPdes Security Advisory: SSRT100872 http://www.mandriva.com/security/advisories?name=MDVSA-2012:055 http://www.securitytracker.com/id?1026913 http://secunia.com/advisories/48751 http://secunia.com/advisories/48754 http://secunia.com/advisories/48816 http://secunia.com/advisories/48818 http://secunia.com/advisories/48844 http://secunia.com/advisories/48873 http://secunia.com/advisories/48879 http://secunia.com/advisories/48999 SuSE Security Announcement: SUSE-SU-2012:0501 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00007.html SuSE Security Announcement: SUSE-SU-2012:0502 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00008.html SuSE Security Announcement: SUSE-SU-2012:0504 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00009.html SuSE Security Announcement: SUSE-SU-2012:0515 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00014.html http://www.ubuntu.com/usn/USN-1423-1
Copyright	Copyright (C) 2015 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.