Test ID:	1.3.6.1.4.1.25623.1.0.900685
Category:	Remote file access
Title:	Samba Format String Vulnerability
Summary:	The host has Samba installed and is prone to Security Bypass; Vulnerability.
Description:	Summary: The host has Samba installed and is prone to Security Bypass Vulnerability. Vulnerability Insight: The flaw is due to uninitialised memory access error in 'smbd' when denying attempts to modify a restricted access control list. This can be exploited to modify the ACL of an already writable file without required permissions. Vulnerability Impact: When dos filemode is set to yes in the smb.conf, attackers can exploit this issue to bypass certain security restrictions and compromise a user's system. Affected Software/OS: Samba 3.0.0 before 3.0.35 on Linux. Samba 3.1.x on Linux. Samba 3.2.4 before 3.2.13 on Linux. Samba 3.3.0 before 3.3.6 on Linux. Solution: Upgrade to version 3.3.6 or later. CVSS Score: 5.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:N
Cross-Ref:	BugTraq ID: 35472 Common Vulnerability Exposure (CVE) ID: CVE-2009-1888 http://www.securityfocus.com/bid/35472 Bugtraq: 20091112 rPSA-2009-0145-1 samba samba-client samba-server samba-swat (Google Search) http://www.securityfocus.com/archive/1/507856/100/0/threaded Debian Security Information: DSA-1823 (Google Search) http://www.debian.org/security/2009/dsa-1823 http://www.mandriva.com/security/advisories?name=MDVSA-2009:196 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10790 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7292 http://www.securitytracker.com/id?1022442 http://secunia.com/advisories/35539 http://secunia.com/advisories/35573 http://secunia.com/advisories/35606 http://secunia.com/advisories/36918 http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.521591 http://www.ubuntu.com/usn/USN-839-1 http://www.vupen.com/english/advisories/2009/1664 XForce ISS Database: samba-acl-security-bypass(51327) https://exchange.xforce.ibmcloud.com/vulnerabilities/51327
Copyright	Copyright (C) 2009 Greenbone Networks GmbH

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.