[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248038

 
 

909

 
 

194772

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

ALAS2-2018-1126 --- samba

ID: oval:org.secpod.oval:def:1700107Date: (C)2018-12-24   (M)2023-12-20
Class: PATCHFamily: unix




A null pointer dereference flaw was found in Samba RPC external printer service. An attacker could use this flaw to cause the printer spooler service to crash.A heap-buffer overflow was found in the way samba clients processed extra long filename in a directory listing. A malicious samba server could use this flaw to cause arbitrary code execution on a samba client.A flaw was found in the way samba allowed the use of weak NTLMv1 authentication even when NTLMv1 was explicitly disabled. A man-in-the-middle attacker could use this flaw to read the credential and other details passed between the samba server and client.

Platform:
Amazon Linux 2
Product:
samba
Reference:
ALAS2-2018-1126
CVE-2018-1050
CVE-2018-1139
CVE-2018-10858
CVE    3
CVE-2018-10858
CVE-2018-1050
CVE-2018-1139
CPE    2
cpe:/a:samba:samba
cpe:/o:amazon:linux:2

© SecPod Technologies