Vulnerability Assessment & Network Security Forums

If through a vulnerability assessment, a network security issue is detected for the vulnerability below, applying the appropriate security patches in a timely matter is very important.  If you have detected that your system has already been compromised, following CERT's Network Security recovery document will assist with recommended steps for system recovery.

Home >> Browse Vulnerability Assessment Database >> Fedora Local Security Checks >> Fedora Core 1 2004-284: samba

Fedora Core 1 2004-284: samba

Vulnerability Assessment Summary Check for the version of the samba package Detailed Explanation for this Vulnerability Assessment The remote host is missing the patch for the advisory FEDORA-2004-284 (samba). Samba is the protocol by which a lot of PC-related machines share files, printers, and other information (such as lists of available files and printers). The Windows NT, OS/2, and Linux operating systems support this natively, and add-on packages can enable the same thing for DOS, Windows, VMS, UNIX of all kinds, MVS, and more. This package provides an SMB server that can be used to provide network services to SMB (sometimes called 'Lan Manager') clients. Samba uses NetBIOS over TCP/IP (NetBT) protocols and does NOT need the NetBEUI (Microsoft Raw NetBIOS frame) protocol. * Wed Aug 25 2004 Jay Fenlason 3.0.6-1.FC2 - Upgade to 3.0.6 include the following patches: samba-3.0.5rc1-passwd.patch from me. This changes the character used in the password field of the entries generated by winbind from a 'x' to a '*'. 'x' means something special ('password is in /etc/shadow') to another pam module. samba-3.0.5pre1-smbclient-kerberos.patch from Alexander Larsson (alexl@redhat.com). Make kerberized smbclient work better. samba-3.0.5pre1-use_authtok.patch from Nalin Dahyabhai Fix an apparent braino in pam_winbind.c and correct Cristian Gafton's name samba-3.0.6-schema.patch from Gerald (Jerry) Carter Correct the LDAP schema samba-3.0.5rc1-64bit-timestamps.patch from Ravikumar (rkumar@hp.com) to permit correct timestamp handling on 64-bit platforms and fix #126109. samba-3.0.4-install.mount.smbfs.patch from Juanjo Villaplana (villapla@si.uji.es) to prevent building the srpm from trashing the installed /usr/bin/smbmount * Thu May 20 2004 Jay Fenlason 3.0.4-2.FC1 - include -winbind patch from Gerald (Jerry) Carter (jerry@samba.org) https://bugzilla.samba.org/show_bug.cgi?id=1315 to make winbindd work against Windows versions that do not have 128 bit encryption enabled. Solution : http://www.fedoranews.org/updates/FEDORA-2004-284.shtml Risk Factor : High Networks Security ID: Vulnerability Assessment Copyright: This script is Copyright (C) 2004 Tenable Network Security

Cables, Connectors

012698-002 HP 512MB DDR2 Cache Memory Module for P800 RAID Controller $27.61

Dell PowerEdge R730 2x E5-2690v3 2.6GHz 12 Core 64GB 8x R-Series Tray H730 RAID $6325.0

Dell PowerEdge R730 2x E5-2690v3 2.6GHz 12 Core 256GB 8x 900GB 10K SAS H730 RAID $9125.0

RAID Maintenance Free Backup AXXRMFBU5 $240.92

Discussions

No Discussions have been posted on this vulnerability.