Samba vulns/updates

FYI…

Samba vuln - v3.6.4 security update
- https://www.samba.org/samba/security/CVE-2012-1182
10 Apr 2012 - "Patches addressing this issue have been posted to: http://www.samba.org/samba/security/
Additionally, Samba 3.6.4, Samba 3.5.14 and 3.4.16 have been issued as security releases to correct the defect. Patches against older Samba versions are available at: http://samba.org/samba/patches/
Samba administrators running affected versions are advised to upgrade to 3.6.4, 3.5.14, or 3.4.16 or apply these patches as soon as possible.
Due to the seriousness of this vulnerability, patches have been released for all Samba versions currently out of support and maintenance from 3.0.37 onwards…"

- http://www.securitytracker.com/id/1026913
Date: Apr 10 2012
CVE Reference: http://web.nvd.nist.gov/view/vuln/detail?v…d=CVE-2012-1182 - 10.0 (HIGH)
Impact: Execution of arbitrary code via network, Root access via network
Version(s): 3.0.x to 3.6.3
Description: A vulnerability was reported in Samba. A remote user can execute arbitrary code on the target system…
Impact: A remote user can execute arbitrary code with root privileges on the target system.
Solution: The vendor has issued a fix (3.6.4)…
- https://www.samba.org/samba/history/samba-3.6.4.html

- https://www.us-cert.gov/current/#samba_rele…s_updates_for_3
April 11, 2012

- https://en.wikipedia.org/wiki/Samba_%28software%29
"… As of version 3, Samba provides file and print services for various Microsoft Windows clients and can integrate with a Windows Server domain, either as a Primary Domain Controller (PDC) or as a domain member. It can also be part of an Active Directory domain. Samba runs on most Unix and Unix-like systems, such as GNU/Linux, Solaris, AIX and the BSD variants, including Apple's Mac OS X Server (which was added to the Mac OS X client in version 10.2)…"

FYI…

Samba v3.4.17, 3.5.15, 3.6.5 released
- http://www.securitytracker.com/id/1026988
Date: Apr 30 2012
CVE Reference: http://web.nvd.nist.gov/view/vuln/detail?v…d=CVE-2012-2111 - 6.5
Impact: Modification of user information, User access via network
Fix Available: Yes Vendor Confirmed: Yes
Version(s): 3.4.x - 3.6.4
Description: … A remote authenticated user can modify user privileges on the target system…
Solution: The vendor has issued a fix (3.4.17, 3.5.15, 3.6.5).
The vendor's advisory is available at:
http://www.samba.org/samba/security/CVE-2012-2111
"… Patches addressing this issue have been posted to:
- https://www.samba.org/samba/history/security.html
Additionally, Samba 3.6.5, Samba 3.5.15 and 3.4.17 have been issued as security releases to correct the defect. Patches against older Samba versions are available at:
- http://samba.org/samba/patches/
Samba administrators running affected versions are advised to upgrade to 3.6.5, 3.5.15, or 3.4.17 or apply these patches as soon as possible"…

- https://secunia.com/advisories/48976/
Release Date: 2012-05-01
CVE Reference(s): http://web.nvd.nist.gov/view/vuln/detail?v…d=CVE-2012-2111 - 6.5
… caused due to improper application of security checks in the CreateAccount, OpenAccount, AddAccountRights, and RemoveAccountRights remote procedure calls (RPC) within the Local Security Authoriy (LSA). This can be exploited to gain "take ownership" privileges and e.g. change the ownership of arbitrary files and directories on the smdb file server.
… reported in versions 3.4.x through 3.6.4.
Solution: Apply patch or update to version 3.4.17, 3.5.15, and 3.6.5.
Original Advisory:
- http://www.samba.org/samba/security/CVE-2012-2111

FYI…

Samba Security Update released
- https://isc.sans.edu/diary.html?storyid=16346
Last Updated: 2013-08-10 02:01:15 UTC - "Samba has released an update to several versions that addresses a denial of service (DOS) on an authenticated or guest connection. This vulnerability impacts all current released versions of Samba.
A note from the samba.org article is that "This flaw is not exploitable beyond causing the code to loop allocating memory, which may cause the machine to exceed memory limits", essentially This is not vulnerable to remote code execution, reducing the overall risk. More details can be found here* and here**"

* https://www.samba.org/samba/history/security.html
05 Aug 2013
** https://www.samba.org/samba/security/CVE-2013-4124
"… Versions: Samba 3.0.x - 4.0.7 (inclusive)…"

- https://www.samba.org/samba/
"Samba is the standard Windows interoperability suite of programs for Linux and Unix. Samba is Free Software licensed under the GNU General Public License, the Samba project is a member of the Software Freedom Conservancy. Since 1992, Samba has provided secure, stable and fast file and print services for all clients using the SMB/CIFS protocol, such as all versions of DOS and Windows, OS/2, Linux and many others. Samba is an important component to seamlessly integrate Linux/Unix Servers and Desktops into Active Directory environments using the winbind daemon."

.

FYI…

Samba vuln - Remote Code Execution CVE-2015-0240
- https://isc.sans.edu/diary.html?storyid=19373
2015-02-25 01:17:03 UTC - "The Red Hat security team has released an advisory on a Samba vulnerability effecting Samba version 3.5.0 through 4.2.0rc4. 'It can be exploited by a malicious Samba client, by sending specially-crafted packets to the Samba server. No authentication is required to exploit this flaw. It can result in remotely controlled execution of arbitrary code as root.'[1] A patch[2] has been released by the Samba team to address the vulnerability."

[1] https://securityblog.redhat.com/2015/02/23/samba-vulnerability-cve-2015-0240/

[2] https://www.samba.org/samba/history/security.html

- https://www.samba.org/samba/security/CVE-2015-0240

- https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-0240 - 10.0 (HIGH)