Test ID:	1.3.6.1.4.1.25623.1.0.71548
Category:	Gentoo Local Security Checks
Title:	Gentoo Security Advisory GLSA 201206-22 (Samba)
Summary:	The remote host is missing updates announced in;advisory GLSA 201206-22.
Description:	Summary: The remote host is missing updates announced in advisory GLSA 201206-22. Vulnerability Insight: Multiple vulnerabilities have been found in Samba, the worst of which may allow execution of arbitrary code with root privileges. Solution: All Samba users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose '>=net-fs/samba-3.5.15' CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2009-2906 1021111 http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021111.1-1 1022976 http://www.securitytracker.com/id?1022976 20091112 rPSA-2009-0145-1 samba samba-client samba-server samba-swat http://www.securityfocus.com/archive/1/507856/100/0/threaded 36573 http://www.securityfocus.com/bid/36573 36893 http://secunia.com/advisories/36893 36918 http://secunia.com/advisories/36918 36937 http://secunia.com/advisories/36937 36953 http://secunia.com/advisories/36953 37428 http://secunia.com/advisories/37428 58519 http://osvdb.org/58519 ADV-2009-2810 http://www.vupen.com/english/advisories/2009/2810 APPLE-SA-2010-03-29-1 http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html FEDORA-2009-10172 https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00098.html FEDORA-2009-10180 https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00095.html SSA:2009-276-01 http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.561439 SUSE-SR:2009:017 http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html USN-839-1 http://www.ubuntu.com/usn/USN-839-1 http://news.samba.org/releases/3.0.37/ http://news.samba.org/releases/3.2.15/ http://news.samba.org/releases/3.3.8/ http://news.samba.org/releases/3.4.2/ http://samba.org/samba/security/CVE-2009-2906.html http://support.apple.com/kb/HT4077 http://wiki.rpath.com/Advisories:rPSA-2009-0145 oval:org.mitre.oval:def:7090 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7090 oval:org.mitre.oval:def:9944 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9944 samba-smb-dos(53575) https://exchange.xforce.ibmcloud.com/vulnerabilities/53575 Common Vulnerability Exposure (CVE) ID: CVE-2009-2948 BugTraq ID: 36572 http://www.securityfocus.com/bid/36572 http://osvdb.org/58520 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10434 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7087 http://www.securitytracker.com/id?1022975 SuSE Security Announcement: SUSE-SR:2009:017 (Google Search) XForce ISS Database: samba-mountcifs-info-disclosure(53574) https://exchange.xforce.ibmcloud.com/vulnerabilities/53574 Common Vulnerability Exposure (CVE) ID: CVE-2010-0728 [samba-announce] 20100308 Security problem with Samba on Linux - affects 3.5.0, 3.4.6 and 3.3.11 http://lists.samba.org/archive/samba-announce/2010/000211.html http://www.samba.org/samba/history/samba-3.3.12.html http://www.samba.org/samba/history/samba-3.4.7.html http://www.samba.org/samba/history/samba-3.5.1.html http://www.samba.org/samba/security/CVE-2010-0728 https://bugzilla.samba.org/show_bug.cgi?id=7222 Common Vulnerability Exposure (CVE) ID: CVE-2010-1635 40097 http://www.securityfocus.com/bid/40097 ADV-2010-1933 http://www.vupen.com/english/advisories/2010/1933 MDVSA-2010:141 http://www.mandriva.com/security/advisories?name=MDVSA-2010:141 http://git.samba.org/?p=samba.git%3Ba=commit%3Bh=25452a2268ac7013da28125f3df22085139af12d http://samba.org/samba/history/samba-3.4.8.html http://samba.org/samba/history/samba-3.5.2.html http://security-tracker.debian.org/tracker/CVE-2010-1635 http://www.stratsec.net/Research/Advisories/Samba-Multiple-DoS-Vulnerabilities-%28SS-2010-005%29 https://bugzilla.redhat.com/show_bug.cgi?id=594921 https://bugzilla.samba.org/show_bug.cgi?id=7229 Common Vulnerability Exposure (CVE) ID: CVE-2010-1642 http://git.samba.org/?p=samba.git%3Ba=commit%3Bh=9280051bfba337458722fb157f3082f93cbd9f2b http://security-tracker.debian.org/tracker/CVE-2010-1642 https://bugzilla.samba.org/show_bug.cgi?id=7254 Common Vulnerability Exposure (CVE) ID: CVE-2010-2063 1024107 http://www.securitytracker.com/id?1024107 20100616 Samba 3.3.12 Memory Corruption Vulnerability http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=873 40145 http://secunia.com/advisories/40145 40210 http://secunia.com/advisories/40210 40221 http://secunia.com/advisories/40221 40293 http://secunia.com/advisories/40293 40884 http://www.securityfocus.com/bid/40884 42319 http://secunia.com/advisories/42319 65518 http://osvdb.org/65518 ADV-2010-1486 http://www.vupen.com/english/advisories/2010/1486 ADV-2010-1504 http://www.vupen.com/english/advisories/2010/1504 ADV-2010-1505 http://www.vupen.com/english/advisories/2010/1505 ADV-2010-1507 http://www.vupen.com/english/advisories/2010/1507 ADV-2010-1517 http://www.vupen.com/english/advisories/2010/1517 ADV-2010-3063 http://www.vupen.com/english/advisories/2010/3063 APPLE-SA-2010-08-24-1 http://lists.apple.com/archives/security-announce/2010//Aug/msg00003.html DSA-2061 http://www.debian.org/security/2010/dsa-2061 HPSBUX02609 http://marc.info/?l=bugtraq&m=129138831608422&w=2 HPSBUX02657 http://marc.info/?l=bugtraq&m=130835366526620&w=2 MDVSA-2010:119 http://www.mandriva.com/security/advisories?name=MDVSA-2010:119 RHSA-2010:0488 http://www.redhat.com/support/errata/RHSA-2010-0488.html SSA:2010-169-01 http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.471914 SSRT100147 SSRT100460 SUSE-SR:2010:014 http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html USN-951-1 http://ubuntu.com/usn/usn-951-1 [samba-announce] 20100616 Samba 3.3.13 Security Release Available for Download http://marc.info/?l=samba-announce&m=127668712312761&w=2 http://support.apple.com/kb/HT4312 http://www.samba.org/samba/ftp/history/samba-3.3.13.html http://www.samba.org/samba/ftp/patches/security/samba-3.0.37-CVE-2010-2063.patch http://www.samba.org/samba/ftp/patches/security/samba-3.3.12-CVE-2010-2063.patch http://www.samba.org/samba/security/CVE-2010-2063.html oval:org.mitre.oval:def:12427 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12427 oval:org.mitre.oval:def:7115 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7115 oval:org.mitre.oval:def:9859 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9859 samba-smb1-code-execution(59481) https://exchange.xforce.ibmcloud.com/vulnerabilities/59481 Common Vulnerability Exposure (CVE) ID: CVE-2010-3069 1024434 http://www.securitytracker.com/id?1024434 20101207 VMSA-2010-0019 VMware ESX third party updates for Service Console http://www.securityfocus.com/archive/1/515055/100/0/threaded 41354 http://secunia.com/advisories/41354 41447 http://secunia.com/advisories/41447 42531 http://secunia.com/advisories/42531 42885 http://secunia.com/advisories/42885 43212 http://www.securityfocus.com/bid/43212 ADV-2010-2378 http://www.vupen.com/english/advisories/2010/2378 ADV-2010-3126 http://www.vupen.com/english/advisories/2010/3126 ADV-2011-0091 http://www.vupen.com/english/advisories/2011/0091 APPLE-SA-2011-03-21-1 http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html APPLE-SA-2011-06-23-1 http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html FEDORA-2010-14627 http://lists.fedoraproject.org/pipermail/package-announce/2010-September/047650.html FEDORA-2010-14678 http://lists.fedoraproject.org/pipermail/package-announce/2010-September/047697.html FEDORA-2010-14768 http://lists.fedoraproject.org/pipermail/package-announce/2010-September/047758.html RHSA-2010:0860 http://www.redhat.com/support/errata/RHSA-2010-0860.html SUSE-SR:2010:018 http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html SUSE-SR:2010:019 http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html USN-987-1 http://www.ubuntu.com/usn/USN-987-1 http://support.apple.com/kb/HT4581 http://support.apple.com/kb/HT4723 http://us1.samba.org/samba/history/samba-3.5.5.html http://us1.samba.org/samba/security/CVE-2010-3069.html http://www.vmware.com/security/advisories/VMSA-2010-0019.html samba-sidparse-bo(61773) https://exchange.xforce.ibmcloud.com/vulnerabilities/61773 Common Vulnerability Exposure (CVE) ID: CVE-2011-0719 1025132 http://www.securitytracker.com/id?1025132 43482 http://secunia.com/advisories/43482 43503 http://secunia.com/advisories/43503 43512 http://secunia.com/advisories/43512 43517 http://secunia.com/advisories/43517 43556 http://secunia.com/advisories/43556 43557 http://secunia.com/advisories/43557 43843 http://secunia.com/advisories/43843 46597 http://www.securityfocus.com/bid/46597 ADV-2011-0517 http://www.vupen.com/english/advisories/2011/0517 ADV-2011-0518 http://www.vupen.com/english/advisories/2011/0518 ADV-2011-0519 http://www.vupen.com/english/advisories/2011/0519 ADV-2011-0520 http://www.vupen.com/english/advisories/2011/0520 ADV-2011-0522 http://www.vupen.com/english/advisories/2011/0522 ADV-2011-0541 http://www.vupen.com/english/advisories/2011/0541 ADV-2011-0702 http://www.vupen.com/english/advisories/2011/0702 DSA-2175 http://www.debian.org/security/2011/dsa-2175 FEDORA-2011-3118 http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056241.html FEDORA-2011-3120 http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056229.html MDVSA-2011:038 http://www.mandriva.com/security/advisories?name=MDVSA-2011:038 RHSA-2011:0305 http://www.redhat.com/support/errata/RHSA-2011-0305.html RHSA-2011:0306 http://www.redhat.com/support/errata/RHSA-2011-0306.html SSA:2011-059-01 http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.593629 USN-1075-1 http://www.ubuntu.com/usn/USN-1075-1 http://samba.org/samba/security/CVE-2011-0719.html http://www.samba.org/samba/history/samba-3.3.15.html http://www.samba.org/samba/history/samba-3.4.12.html http://www.samba.org/samba/history/samba-3.5.7.html https://bugzilla.redhat.com/show_bug.cgi?id=678328 samba-fdset-dos(65724) https://exchange.xforce.ibmcloud.com/vulnerabilities/65724 Common Vulnerability Exposure (CVE) ID: CVE-2011-1678 http://www.mandriva.com/security/advisories?name=MDVSA-2011:148 https://bugzilla.redhat.com/show_bug.cgi?id=688980 http://openwall.com/lists/oss-security/2011/03/04/11 http://openwall.com/lists/oss-security/2011/03/04/9 http://openwall.com/lists/oss-security/2011/03/04/10 http://openwall.com/lists/oss-security/2011/03/04/12 http://openwall.com/lists/oss-security/2011/03/05/3 http://openwall.com/lists/oss-security/2011/03/05/7 http://openwall.com/lists/oss-security/2011/03/07/9 http://openwall.com/lists/oss-security/2011/03/14/16 http://openwall.com/lists/oss-security/2011/03/14/5 http://openwall.com/lists/oss-security/2011/03/14/7 http://openwall.com/lists/oss-security/2011/03/15/6 http://openwall.com/lists/oss-security/2011/03/22/4 http://openwall.com/lists/oss-security/2011/03/22/6 http://openwall.com/lists/oss-security/2011/03/31/3 http://openwall.com/lists/oss-security/2011/03/31/4 http://openwall.com/lists/oss-security/2011/04/01/2 XForce ISS Database: samba-smbfs-security-bypass(66702) https://exchange.xforce.ibmcloud.com/vulnerabilities/66702 Common Vulnerability Exposure (CVE) ID: CVE-2011-2724 1025984 http://www.securitytracker.com/id?1025984 45798 http://secunia.com/advisories/45798 MDVSA-2011:148 RHSA-2011:1220 http://www.redhat.com/support/errata/RHSA-2011-1220.html RHSA-2011:1221 http://www.redhat.com/support/errata/RHSA-2011-1221.html [oss-security] 20110729 CVE-2011-2724 assignment notification -- samba -- incomplete fix for CVE-2010-0547 issue http://openwall.com/lists/oss-security/2011/07/29/9 http://comments.gmane.org/gmane.linux.kernel.cifs/3827 http://git.samba.org/?p=cifs-utils.git%3Ba=commit%3Bh=1e7a32924b22d1f786b6f490ce8590656f578f91 https://bugzilla.redhat.com/show_bug.cgi?id=726691 Common Vulnerability Exposure (CVE) ID: CVE-2012-0870 48116 http://secunia.com/advisories/48116 48186 http://secunia.com/advisories/48186 48844 http://secunia.com/advisories/48844 48879 http://secunia.com/advisories/48879 APPLE-SA-2012-05-09-1 http://lists.apple.com/archives/security-announce/2012/May/msg00001.html SUSE-SU-2012:0337 http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00008.html SUSE-SU-2012:0338 http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00009.html SUSE-SU-2012:0502 http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00008.html SUSE-SU-2012:0515 http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00014.html USN-1374-1 http://www.ubuntu.com/usn/USN-1374-1 blackberry-playbook-samba-code-execution(73361) https://exchange.xforce.ibmcloud.com/vulnerabilities/73361 http://btsc.webapps.blackberry.com/btsc/search.do?cmd=displayKC&docType=kc&externalId=KB29565 http://support.apple.com/kb/HT5281 https://bugzilla.redhat.com/show_bug.cgi?id=795509 Common Vulnerability Exposure (CVE) ID: CVE-2012-1182 Debian Security Information: DSA-2450 (Google Search) http://www.debian.org/security/2012/dsa-2450 http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078726.html http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078836.html http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078258.html http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080567.html HPdes Security Advisory: HPSBMU02790 http://marc.info/?l=bugtraq&m=133951282306605&w=2 HPdes Security Advisory: HPSBUX02789 http://marc.info/?l=bugtraq&m=134323086902585&w=2 HPdes Security Advisory: SSRT100824 HPdes Security Advisory: SSRT100872 http://www.mandriva.com/security/advisories?name=MDVSA-2012:055 http://www.securitytracker.com/id?1026913 http://secunia.com/advisories/48751 http://secunia.com/advisories/48754 http://secunia.com/advisories/48816 http://secunia.com/advisories/48818 http://secunia.com/advisories/48873 http://secunia.com/advisories/48999 SuSE Security Announcement: SUSE-SU-2012:0501 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00007.html SuSE Security Announcement: SUSE-SU-2012:0502 (Google Search) SuSE Security Announcement: SUSE-SU-2012:0504 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00009.html SuSE Security Announcement: SUSE-SU-2012:0515 (Google Search) http://www.ubuntu.com/usn/USN-1423-1 Common Vulnerability Exposure (CVE) ID: CVE-2012-2111 1026988 http://www.securitytracker.com/id?1026988 48976 http://secunia.com/advisories/48976 48984 http://secunia.com/advisories/48984 48996 http://secunia.com/advisories/48996 48999 49017 http://secunia.com/advisories/49017 49030 http://secunia.com/advisories/49030 81648 http://osvdb.org/81648 DSA-2463 http://www.debian.org/security/2012/dsa-2463 FEDORA-2012-6981 http://lists.fedoraproject.org/pipermail/package-announce/2012-May/079662.html FEDORA-2012-6999 http://lists.fedoraproject.org/pipermail/package-announce/2012-May/079670.html FEDORA-2012-7006 http://lists.fedoraproject.org/pipermail/package-announce/2012-May/079677.html HPSBUX02789 MDVSA-2012:067 http://www.mandriva.com/security/advisories?name=MDVSA-2012:067 RHSA-2012:0533 http://rhn.redhat.com/errata/RHSA-2012-0533.html SSRT100824 SUSE-SU-2012:0573 http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00023.html SUSE-SU-2012:0591 http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00003.html USN-1434-1 http://www.ubuntu.com/usn/USN-1434-1 http://www.collax.com/produkte/AllinOne-server-for-small-businesses#id2565578 http://www.samba.org/samba/security/CVE-2012-2111 openSUSE-SU-2012:0583 http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00001.html
Copyright	Copyright (C) 2012 E-Soft Inc.

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.