ID CVE-2015-0240
Summary The Netlogon server implementation in smbd in Samba 3.5.x and 3.6.x before 3.6.25, 4.0.x before 4.0.25, 4.1.x before 4.1.17, and 4.2.x before 4.2.0rc5 performs a free operation on an uninitialized stack pointer, which allows remote attackers to execute arbitrary code via crafted Netlogon packets that use the ServerPasswordSet RPC API, as demonstrated by packets reaching the _netr_ServerPasswordSet function in rpc_server/netlogon/srv_netlog_nt.c.
References
Vulnerable Configurations
  • Red Hat Enterprise Linux 5
    cpe:2.3:o:redhat:enterprise_linux:5
  • Red Hat Enterprise Linux 6
    cpe:2.3:o:redhat:enterprise_linux:6
  • Red Hat Enterprise Linux (RHEL) 7.0 (7)
    cpe:2.3:o:redhat:enterprise_linux:7.0
  • Samba 4.0.0
    cpe:2.3:a:samba:samba:4.0.0
  • Samba 4.0.1
    cpe:2.3:a:samba:samba:4.0.1
  • Samba 4.0.10
    cpe:2.3:a:samba:samba:4.0.10
  • Samba 4.0.11
    cpe:2.3:a:samba:samba:4.0.11
  • Samba 4.0.12
    cpe:2.3:a:samba:samba:4.0.12
  • Samba 4.0.13
    cpe:2.3:a:samba:samba:4.0.13
  • Samba 4.0.14
    cpe:2.3:a:samba:samba:4.0.14
  • Samba 4.0.15
    cpe:2.3:a:samba:samba:4.0.15
  • Samba 4.0.16
    cpe:2.3:a:samba:samba:4.0.16
  • Samba 4.0.17
    cpe:2.3:a:samba:samba:4.0.17
  • Samba 4.0.18
    cpe:2.3:a:samba:samba:4.0.18
  • Samba 4.0.19
    cpe:2.3:a:samba:samba:4.0.19
  • Samba 4.0.2
    cpe:2.3:a:samba:samba:4.0.2
  • Samba 4.0.20
    cpe:2.3:a:samba:samba:4.0.20
  • Samba 4.0.21
    cpe:2.3:a:samba:samba:4.0.21
  • Samba 4.0.22
    cpe:2.3:a:samba:samba:4.0.22
  • Samba 4.0.23
    cpe:2.3:a:samba:samba:4.0.23
  • Samba 4.0.24
    cpe:2.3:a:samba:samba:4.0.24
  • Samba 4.0.3
    cpe:2.3:a:samba:samba:4.0.3
  • Samba 4.0.4
    cpe:2.3:a:samba:samba:4.0.4
  • Samba 4.0.5
    cpe:2.3:a:samba:samba:4.0.5
  • Samba 4.0.6
    cpe:2.3:a:samba:samba:4.0.6
  • Samba 4.0.7
    cpe:2.3:a:samba:samba:4.0.7
  • Samba 4.0.8
    cpe:2.3:a:samba:samba:4.0.8
  • Samba 4.0.9
    cpe:2.3:a:samba:samba:4.0.9
  • Samba 4.1.0
    cpe:2.3:a:samba:samba:4.1.0
  • Samba 4.1.1
    cpe:2.3:a:samba:samba:4.1.1
  • Samba 4.1.10
    cpe:2.3:a:samba:samba:4.1.10
  • Samba 4.1.11
    cpe:2.3:a:samba:samba:4.1.11
  • Samba 4.1.12
    cpe:2.3:a:samba:samba:4.1.12
  • Samba 4.1.13
    cpe:2.3:a:samba:samba:4.1.13
  • Samba 4.1.14
    cpe:2.3:a:samba:samba:4.1.14
  • Samba 4.1.15
    cpe:2.3:a:samba:samba:4.1.15
  • Samba 4.1.16
    cpe:2.3:a:samba:samba:4.1.16
  • Samba 4.1.2
    cpe:2.3:a:samba:samba:4.1.2
  • Samba 4.1.3
    cpe:2.3:a:samba:samba:4.1.3
  • Samba 4.1.4
    cpe:2.3:a:samba:samba:4.1.4
  • Samba 4.1.5
    cpe:2.3:a:samba:samba:4.1.5
  • Samba 4.1.6
    cpe:2.3:a:samba:samba:4.1.6
  • Samba 4.1.7
    cpe:2.3:a:samba:samba:4.1.7
  • Samba 4.1.8
    cpe:2.3:a:samba:samba:4.1.8
  • Samba 4.1.9
    cpe:2.3:a:samba:samba:4.1.9
  • Samba 4.2.0 release candidate 1
    cpe:2.3:a:samba:samba:4.2.0:rc1
  • Samba 4.2.0 release candidate 2
    cpe:2.3:a:samba:samba:4.2.0:rc2
  • Samba 4.2.0 release candidate 3
    cpe:2.3:a:samba:samba:4.2.0:rc3
  • Samba 4.2.0 release candidate 4
    cpe:2.3:a:samba:samba:4.2.0:rc4
  • Samba 3.5.0
    cpe:2.3:a:samba:samba:3.5.0
  • Samba 3.5.1
    cpe:2.3:a:samba:samba:3.5.1
  • Samba 3.5.3
    cpe:2.3:a:samba:samba:3.5.3
  • Samba 3.5.4
    cpe:2.3:a:samba:samba:3.5.4
  • Samba 3.5.5
    cpe:2.3:a:samba:samba:3.5.5
  • Samba 3.5.6
    cpe:2.3:a:samba:samba:3.5.6
  • Samba 3.5.7
    cpe:2.3:a:samba:samba:3.5.7
  • Samba 3.5.8
    cpe:2.3:a:samba:samba:3.5.8
  • Samba 3.5.9
    cpe:2.3:a:samba:samba:3.5.9
  • Samba 3.6.0
    cpe:2.3:a:samba:samba:3.6.0
  • Samba 3.6.1
    cpe:2.3:a:samba:samba:3.6.1
  • Samba 3.6.10
    cpe:2.3:a:samba:samba:3.6.10
  • Samba 3.6.11
    cpe:2.3:a:samba:samba:3.6.11
  • Samba 3.6.12
    cpe:2.3:a:samba:samba:3.6.12
  • Samba 3.6.13
    cpe:2.3:a:samba:samba:3.6.13
  • Samba 3.6.14
    cpe:2.3:a:samba:samba:3.6.14
  • Samba 3.6.15
    cpe:2.3:a:samba:samba:3.6.15
  • Samba 3.6.16
    cpe:2.3:a:samba:samba:3.6.16
  • Samba 3.6.17
    cpe:2.3:a:samba:samba:3.6.17
  • Samba 3.6.18
    cpe:2.3:a:samba:samba:3.6.18
  • Samba 3.6.19
    cpe:2.3:a:samba:samba:3.6.19
  • Samba 3.6.2
    cpe:2.3:a:samba:samba:3.6.2
  • Samba 3.6.20
    cpe:2.3:a:samba:samba:3.6.20
  • Samba 3.6.21
    cpe:2.3:a:samba:samba:3.6.21
  • Samba 3.6.22
    cpe:2.3:a:samba:samba:3.6.22
  • Samba 3.6.23
    cpe:2.3:a:samba:samba:3.6.23
  • Samba 3.6.24
    cpe:2.3:a:samba:samba:3.6.24
  • Samba 3.5.10
    cpe:2.3:a:samba:samba:3.5.10
  • Samba 3.5.11
    cpe:2.3:a:samba:samba:3.5.11
  • Samba 3.5.12
    cpe:2.3:a:samba:samba:3.5.12
  • Samba 3.5.13
    cpe:2.3:a:samba:samba:3.5.13
  • Samba 3.5.14
    cpe:2.3:a:samba:samba:3.5.14
  • Samba 3.5.15
    cpe:2.3:a:samba:samba:3.5.15
  • Samba 3.5.16
    cpe:2.3:a:samba:samba:3.5.16
  • Samba 3.5.17
    cpe:2.3:a:samba:samba:3.5.17
  • Samba 3.5.18
    cpe:2.3:a:samba:samba:3.5.18
  • Samba 3.5.19
    cpe:2.3:a:samba:samba:3.5.19
  • Samba 3.5.2
    cpe:2.3:a:samba:samba:3.5.2
  • Samba 3.5.20
    cpe:2.3:a:samba:samba:3.5.20
  • Samba 3.5.21
    cpe:2.3:a:samba:samba:3.5.21
  • Samba 3.5.22
    cpe:2.3:a:samba:samba:3.5.22
  • cpe:2.3:o:novell:suse_linux_enterprise_server:12
    cpe:2.3:o:novell:suse_linux_enterprise_server:12
  • cpe:2.3:o:novell:suse_linux_enterprise_desktop:12
    cpe:2.3:o:novell:suse_linux_enterprise_desktop:12
  • cpe:2.3:o:novell:suse_linux_enterprise_software_development_kit:12
    cpe:2.3:o:novell:suse_linux_enterprise_software_development_kit:12
  • Canonical Ubuntu Linux 12.04 LTS
    cpe:2.3:o:canonical:ubuntu_linux:12.04:-:-:-:lts
  • Canonical Ubuntu Linux 14.04 LTS (Long-Term Support)
    cpe:2.3:o:canonical:ubuntu_linux:14.04:-:-:-:lts
  • Canonical Ubuntu Linux 14.10
    cpe:2.3:o:canonical:ubuntu_linux:14.10
CVSS
Base: 10.0 (as of 27-02-2015 - 14:05)
Impact:
Exploitability:
CWE CWE-17
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
COMPLETE COMPLETE COMPLETE
exploit-db via4
author sleepya
date 2015-04-13
description Samba < 3.6.2 (x86) - Denial of Service (PoC)
file platforms/lin_x86/dos/36741.py
id 36741
platform lin_x86
port 0
type dos
redhat via4
advisories
  • bugzilla
    id 1191325
    title CVE-2015-0240 samba: talloc free on uninitialized stack pointer in netlogon server could lead to remote-code execution
    oval
    AND
    • comment Red Hat Enterprise Linux 5 is installed
      oval oval:com.redhat.rhsa:tst:20070055001
    • OR
      • AND
        • comment samba3x is earlier than 0:3.6.23-9.el5_11
          oval oval:com.redhat.rhsa:tst:20150249002
        • comment samba3x is signed with Red Hat redhatrelease key
          oval oval:com.redhat.rhsa:tst:20100488029
      • AND
        • comment samba3x-client is earlier than 0:3.6.23-9.el5_11
          oval oval:com.redhat.rhsa:tst:20150249012
        • comment samba3x-client is signed with Red Hat redhatrelease key
          oval oval:com.redhat.rhsa:tst:20100488043
      • AND
        • comment samba3x-common is earlier than 0:3.6.23-9.el5_11
          oval oval:com.redhat.rhsa:tst:20150249004
        • comment samba3x-common is signed with Red Hat redhatrelease key
          oval oval:com.redhat.rhsa:tst:20100488031
      • AND
        • comment samba3x-doc is earlier than 0:3.6.23-9.el5_11
          oval oval:com.redhat.rhsa:tst:20150249016
        • comment samba3x-doc is signed with Red Hat redhatrelease key
          oval oval:com.redhat.rhsa:tst:20100488035
      • AND
        • comment samba3x-domainjoin-gui is earlier than 0:3.6.23-9.el5_11
          oval oval:com.redhat.rhsa:tst:20150249006
        • comment samba3x-domainjoin-gui is signed with Red Hat redhatrelease key
          oval oval:com.redhat.rhsa:tst:20100488041
      • AND
        • comment samba3x-swat is earlier than 0:3.6.23-9.el5_11
          oval oval:com.redhat.rhsa:tst:20150249008
        • comment samba3x-swat is signed with Red Hat redhatrelease key
          oval oval:com.redhat.rhsa:tst:20100488045
      • AND
        • comment samba3x-winbind is earlier than 0:3.6.23-9.el5_11
          oval oval:com.redhat.rhsa:tst:20150249010
        • comment samba3x-winbind is signed with Red Hat redhatrelease key
          oval oval:com.redhat.rhsa:tst:20100488053
      • AND
        • comment samba3x-winbind-devel is earlier than 0:3.6.23-9.el5_11
          oval oval:com.redhat.rhsa:tst:20150249014
        • comment samba3x-winbind-devel is signed with Red Hat redhatrelease key
          oval oval:com.redhat.rhsa:tst:20100488047
    rhsa
    id RHSA-2015:0249
    released 2015-02-23
    severity Critical
    title RHSA-2015:0249: samba3x security update (Critical)
  • bugzilla
    id 1191325
    title CVE-2015-0240 samba: talloc free on uninitialized stack pointer in netlogon server could lead to remote-code execution
    oval
    AND
    • OR
      • comment Red Hat Enterprise Linux 6 Client is installed
        oval oval:com.redhat.rhsa:tst:20100842001
      • comment Red Hat Enterprise Linux 6 Server is installed
        oval oval:com.redhat.rhsa:tst:20100842002
      • comment Red Hat Enterprise Linux 6 Workstation is installed
        oval oval:com.redhat.rhsa:tst:20100842003
      • comment Red Hat Enterprise Linux 6 ComputeNode is installed
        oval oval:com.redhat.rhsa:tst:20100842004
    • OR
      • AND
        • comment samba4 is earlier than 0:4.0.0-66.el6_6.rc4
          oval oval:com.redhat.rhsa:tst:20150250005
        • comment samba4 is signed with Red Hat redhatrelease2 key
          oval oval:com.redhat.rhsa:tst:20130506006
      • AND
        • comment samba4-client is earlier than 0:4.0.0-66.el6_6.rc4
          oval oval:com.redhat.rhsa:tst:20150250017
        • comment samba4-client is signed with Red Hat redhatrelease2 key
          oval oval:com.redhat.rhsa:tst:20130506014
      • AND
        • comment samba4-common is earlier than 0:4.0.0-66.el6_6.rc4
          oval oval:com.redhat.rhsa:tst:20150250013
        • comment samba4-common is signed with Red Hat redhatrelease2 key
          oval oval:com.redhat.rhsa:tst:20130506022
      • AND
        • comment samba4-dc is earlier than 0:4.0.0-66.el6_6.rc4
          oval oval:com.redhat.rhsa:tst:20150250019
        • comment samba4-dc is signed with Red Hat redhatrelease2 key
          oval oval:com.redhat.rhsa:tst:20130506020
      • AND
        • comment samba4-dc-libs is earlier than 0:4.0.0-66.el6_6.rc4
          oval oval:com.redhat.rhsa:tst:20150250009
        • comment samba4-dc-libs is signed with Red Hat redhatrelease2 key
          oval oval:com.redhat.rhsa:tst:20130506028
      • AND
        • comment samba4-devel is earlier than 0:4.0.0-66.el6_6.rc4
          oval oval:com.redhat.rhsa:tst:20150250027
        • comment samba4-devel is signed with Red Hat redhatrelease2 key
          oval oval:com.redhat.rhsa:tst:20130506026
      • AND
        • comment samba4-libs is earlier than 0:4.0.0-66.el6_6.rc4
          oval oval:com.redhat.rhsa:tst:20150250025
        • comment samba4-libs is signed with Red Hat redhatrelease2 key
          oval oval:com.redhat.rhsa:tst:20130506010
      • AND
        • comment samba4-pidl is earlier than 0:4.0.0-66.el6_6.rc4
          oval oval:com.redhat.rhsa:tst:20150250011
        • comment samba4-pidl is signed with Red Hat redhatrelease2 key
          oval oval:com.redhat.rhsa:tst:20130506032
      • AND
        • comment samba4-python is earlier than 0:4.0.0-66.el6_6.rc4
          oval oval:com.redhat.rhsa:tst:20150250015
        • comment samba4-python is signed with Red Hat redhatrelease2 key
          oval oval:com.redhat.rhsa:tst:20130506030
      • AND
        • comment samba4-swat is earlier than 0:4.0.0-66.el6_6.rc4
          oval oval:com.redhat.rhsa:tst:20150250021
        • comment samba4-swat is signed with Red Hat redhatrelease2 key
          oval oval:com.redhat.rhsa:tst:20130506016
      • AND
        • comment samba4-test is earlier than 0:4.0.0-66.el6_6.rc4
          oval oval:com.redhat.rhsa:tst:20150250023
        • comment samba4-test is signed with Red Hat redhatrelease2 key
          oval oval:com.redhat.rhsa:tst:20130506008
      • AND
        • comment samba4-winbind is earlier than 0:4.0.0-66.el6_6.rc4
          oval oval:com.redhat.rhsa:tst:20150250031
        • comment samba4-winbind is signed with Red Hat redhatrelease2 key
          oval oval:com.redhat.rhsa:tst:20130506024
      • AND
        • comment samba4-winbind-clients is earlier than 0:4.0.0-66.el6_6.rc4
          oval oval:com.redhat.rhsa:tst:20150250007
        • comment samba4-winbind-clients is signed with Red Hat redhatrelease2 key
          oval oval:com.redhat.rhsa:tst:20130506012
      • AND
        • comment samba4-winbind-krb5-locator is earlier than 0:4.0.0-66.el6_6.rc4
          oval oval:com.redhat.rhsa:tst:20150250029
        • comment samba4-winbind-krb5-locator is signed with Red Hat redhatrelease2 key
          oval oval:com.redhat.rhsa:tst:20130506018
    rhsa
    id RHSA-2015:0250
    released 2015-02-23
    severity Critical
    title RHSA-2015:0250: samba4 security update (Critical)
  • bugzilla
    id 1191325
    title CVE-2015-0240 samba: talloc free on uninitialized stack pointer in netlogon server could lead to remote-code execution
    oval
    AND
    • OR
      • comment Red Hat Enterprise Linux 6 Client is installed
        oval oval:com.redhat.rhsa:tst:20100842001
      • comment Red Hat Enterprise Linux 6 Server is installed
        oval oval:com.redhat.rhsa:tst:20100842002
      • comment Red Hat Enterprise Linux 6 Workstation is installed
        oval oval:com.redhat.rhsa:tst:20100842003
      • comment Red Hat Enterprise Linux 6 ComputeNode is installed
        oval oval:com.redhat.rhsa:tst:20100842004
    • OR
      • AND
        • comment libsmbclient is earlier than 0:3.6.23-14.el6_6
          oval oval:com.redhat.rhsa:tst:20150251007
        • comment libsmbclient is signed with Red Hat redhatrelease2 key
          oval oval:com.redhat.rhsa:tst:20100860012
      • AND
        • comment libsmbclient-devel is earlier than 0:3.6.23-14.el6_6
          oval oval:com.redhat.rhsa:tst:20150251027
        • comment libsmbclient-devel is signed with Red Hat redhatrelease2 key
          oval oval:com.redhat.rhsa:tst:20100860022
      • AND
        • comment samba is earlier than 0:3.6.23-14.el6_6
          oval oval:com.redhat.rhsa:tst:20150251005
        • comment samba is signed with Red Hat redhatrelease2 key
          oval oval:com.redhat.rhsa:tst:20100860006
      • AND
        • comment samba-client is earlier than 0:3.6.23-14.el6_6
          oval oval:com.redhat.rhsa:tst:20150251023
        • comment samba-client is signed with Red Hat redhatrelease2 key
          oval oval:com.redhat.rhsa:tst:20100860014
      • AND
        • comment samba-common is earlier than 0:3.6.23-14.el6_6
          oval oval:com.redhat.rhsa:tst:20150251009
        • comment samba-common is signed with Red Hat redhatrelease2 key
          oval oval:com.redhat.rhsa:tst:20100860016
      • AND
        • comment samba-doc is earlier than 0:3.6.23-14.el6_6
          oval oval:com.redhat.rhsa:tst:20150251011
        • comment samba-doc is signed with Red Hat redhatrelease2 key
          oval oval:com.redhat.rhsa:tst:20100860026
      • AND
        • comment samba-domainjoin-gui is earlier than 0:3.6.23-14.el6_6
          oval oval:com.redhat.rhsa:tst:20150251019
        • comment samba-domainjoin-gui is signed with Red Hat redhatrelease2 key
          oval oval:com.redhat.rhsa:tst:20100860024
      • AND
        • comment samba-glusterfs is earlier than 0:3.6.23-14.el6_6
          oval oval:com.redhat.rhsa:tst:20150251029
        • comment samba-glusterfs is signed with Red Hat redhatrelease2 key
          oval oval:com.redhat.rhsa:tst:20150251030
      • AND
        • comment samba-swat is earlier than 0:3.6.23-14.el6_6
          oval oval:com.redhat.rhsa:tst:20150251025
        • comment samba-swat is signed with Red Hat redhatrelease2 key
          oval oval:com.redhat.rhsa:tst:20100860008
      • AND
        • comment samba-winbind is earlier than 0:3.6.23-14.el6_6
          oval oval:com.redhat.rhsa:tst:20150251013
        • comment samba-winbind is signed with Red Hat redhatrelease2 key
          oval oval:com.redhat.rhsa:tst:20100860010
      • AND
        • comment samba-winbind-clients is earlier than 0:3.6.23-14.el6_6
          oval oval:com.redhat.rhsa:tst:20150251017
        • comment samba-winbind-clients is signed with Red Hat redhatrelease2 key
          oval oval:com.redhat.rhsa:tst:20100860020
      • AND
        • comment samba-winbind-devel is earlier than 0:3.6.23-14.el6_6
          oval oval:com.redhat.rhsa:tst:20150251015
        • comment samba-winbind-devel is signed with Red Hat redhatrelease2 key
          oval oval:com.redhat.rhsa:tst:20100860018
      • AND
        • comment samba-winbind-krb5-locator is earlier than 0:3.6.23-14.el6_6
          oval oval:com.redhat.rhsa:tst:20150251021
        • comment samba-winbind-krb5-locator is signed with Red Hat redhatrelease2 key
          oval oval:com.redhat.rhsa:tst:20111221018
    rhsa
    id RHSA-2015:0251
    released 2015-02-23
    severity Critical
    title RHSA-2015:0251: samba security update (Critical)
  • bugzilla
    id 1191325
    title CVE-2015-0240 samba: talloc free on uninitialized stack pointer in netlogon server could lead to remote-code execution
    oval
    AND
    • OR
      • comment Red Hat Enterprise Linux 7 Client is installed
        oval oval:com.redhat.rhsa:tst:20140675001
      • comment Red Hat Enterprise Linux 7 Server is installed
        oval oval:com.redhat.rhsa:tst:20140675002
      • comment Red Hat Enterprise Linux 7 Workstation is installed
        oval oval:com.redhat.rhsa:tst:20140675003
      • comment Red Hat Enterprise Linux 7 ComputeNode is installed
        oval oval:com.redhat.rhsa:tst:20140675004
    • OR
      • AND
        • comment libsmbclient is earlier than 0:4.1.1-38.el7_0
          oval oval:com.redhat.rhsa:tst:20150252029
        • comment libsmbclient is signed with Red Hat redhatrelease2 key
          oval oval:com.redhat.rhsa:tst:20100860012
      • AND
        • comment libsmbclient-devel is earlier than 0:4.1.1-38.el7_0
          oval oval:com.redhat.rhsa:tst:20150252027
        • comment libsmbclient-devel is signed with Red Hat redhatrelease2 key
          oval oval:com.redhat.rhsa:tst:20100860022
      • AND
        • comment libwbclient is earlier than 0:4.1.1-38.el7_0
          oval oval:com.redhat.rhsa:tst:20150252021
        • comment libwbclient is signed with Red Hat redhatrelease2 key
          oval oval:com.redhat.rhsa:tst:20140867026
      • AND
        • comment libwbclient-devel is earlier than 0:4.1.1-38.el7_0
          oval oval:com.redhat.rhsa:tst:20150252025
        • comment libwbclient-devel is signed with Red Hat redhatrelease2 key
          oval oval:com.redhat.rhsa:tst:20140867008
      • AND
        • comment samba is earlier than 0:4.1.1-38.el7_0
          oval oval:com.redhat.rhsa:tst:20150252005
        • comment samba is signed with Red Hat redhatrelease2 key
          oval oval:com.redhat.rhsa:tst:20100860006
      • AND
        • comment samba-client is earlier than 0:4.1.1-38.el7_0
          oval oval:com.redhat.rhsa:tst:20150252007
        • comment samba-client is signed with Red Hat redhatrelease2 key
          oval oval:com.redhat.rhsa:tst:20100860014
      • AND
        • comment samba-common is earlier than 0:4.1.1-38.el7_0
          oval oval:com.redhat.rhsa:tst:20150252023
        • comment samba-common is signed with Red Hat redhatrelease2 key
          oval oval:com.redhat.rhsa:tst:20100860016
      • AND
        • comment samba-dc is earlier than 0:4.1.1-38.el7_0
          oval oval:com.redhat.rhsa:tst:20150252033
        • comment samba-dc is signed with Red Hat redhatrelease2 key
          oval oval:com.redhat.rhsa:tst:20140867028
      • AND
        • comment samba-dc-libs is earlier than 0:4.1.1-38.el7_0
          oval oval:com.redhat.rhsa:tst:20150252017
        • comment samba-dc-libs is signed with Red Hat redhatrelease2 key
          oval oval:com.redhat.rhsa:tst:20140867014
      • AND
        • comment samba-devel is earlier than 0:4.1.1-38.el7_0
          oval oval:com.redhat.rhsa:tst:20150252037
        • comment samba-devel is signed with Red Hat redhatrelease2 key
          oval oval:com.redhat.rhsa:tst:20140867020
      • AND
        • comment samba-libs is earlier than 0:4.1.1-38.el7_0
          oval oval:com.redhat.rhsa:tst:20150252009
        • comment samba-libs is signed with Red Hat redhatrelease2 key
          oval oval:com.redhat.rhsa:tst:20140867024
      • AND
        • comment samba-pidl is earlier than 0:4.1.1-38.el7_0
          oval oval:com.redhat.rhsa:tst:20150252031
        • comment samba-pidl is signed with Red Hat redhatrelease2 key
          oval oval:com.redhat.rhsa:tst:20140867022
      • AND
        • comment samba-python is earlier than 0:4.1.1-38.el7_0
          oval oval:com.redhat.rhsa:tst:20150252011
        • comment samba-python is signed with Red Hat redhatrelease2 key
          oval oval:com.redhat.rhsa:tst:20140867010
      • AND
        • comment samba-test is earlier than 0:4.1.1-38.el7_0
          oval oval:com.redhat.rhsa:tst:20150252013
        • comment samba-test is signed with Red Hat redhatrelease2 key
          oval oval:com.redhat.rhsa:tst:20140867040
      • AND
        • comment samba-test-devel is earlier than 0:4.1.1-38.el7_0
          oval oval:com.redhat.rhsa:tst:20150252015
        • comment samba-test-devel is signed with Red Hat redhatrelease2 key
          oval oval:com.redhat.rhsa:tst:20140867030
      • AND
        • comment samba-vfs-glusterfs is earlier than 0:4.1.1-38.el7_0
          oval oval:com.redhat.rhsa:tst:20150252043
        • comment samba-vfs-glusterfs is signed with Red Hat redhatrelease2 key
          oval oval:com.redhat.rhsa:tst:20140867044
      • AND
        • comment samba-winbind is earlier than 0:4.1.1-38.el7_0
          oval oval:com.redhat.rhsa:tst:20150252041
        • comment samba-winbind is signed with Red Hat redhatrelease2 key
          oval oval:com.redhat.rhsa:tst:20100860010
      • AND
        • comment samba-winbind-clients is earlier than 0:4.1.1-38.el7_0
          oval oval:com.redhat.rhsa:tst:20150252039
        • comment samba-winbind-clients is signed with Red Hat redhatrelease2 key
          oval oval:com.redhat.rhsa:tst:20100860020
      • AND
        • comment samba-winbind-krb5-locator is earlier than 0:4.1.1-38.el7_0
          oval oval:com.redhat.rhsa:tst:20150252019
        • comment samba-winbind-krb5-locator is signed with Red Hat redhatrelease2 key
          oval oval:com.redhat.rhsa:tst:20111221018
      • AND
        • comment samba-winbind-modules is earlier than 0:4.1.1-38.el7_0
          oval oval:com.redhat.rhsa:tst:20150252035
        • comment samba-winbind-modules is signed with Red Hat redhatrelease2 key
          oval oval:com.redhat.rhsa:tst:20140867016
    rhsa
    id RHSA-2015:0252
    released 2015-02-23
    severity Important
    title RHSA-2015:0252: samba security update (Important)
  • rhsa
    id RHSA-2015:0253
  • rhsa
    id RHSA-2015:0254
  • rhsa
    id RHSA-2015:0255
  • rhsa
    id RHSA-2015:0256
  • rhsa
    id RHSA-2015:0257
rpms
  • samba3x-0:3.6.23-9.el5_11
  • samba3x-client-0:3.6.23-9.el5_11
  • samba3x-common-0:3.6.23-9.el5_11
  • samba3x-doc-0:3.6.23-9.el5_11
  • samba3x-domainjoin-gui-0:3.6.23-9.el5_11
  • samba3x-swat-0:3.6.23-9.el5_11
  • samba3x-winbind-0:3.6.23-9.el5_11
  • samba3x-winbind-devel-0:3.6.23-9.el5_11
  • samba4-0:4.0.0-66.el6_6.rc4
  • samba4-client-0:4.0.0-66.el6_6.rc4
  • samba4-common-0:4.0.0-66.el6_6.rc4
  • samba4-dc-0:4.0.0-66.el6_6.rc4
  • samba4-dc-libs-0:4.0.0-66.el6_6.rc4
  • samba4-devel-0:4.0.0-66.el6_6.rc4
  • samba4-libs-0:4.0.0-66.el6_6.rc4
  • samba4-pidl-0:4.0.0-66.el6_6.rc4
  • samba4-python-0:4.0.0-66.el6_6.rc4
  • samba4-swat-0:4.0.0-66.el6_6.rc4
  • samba4-test-0:4.0.0-66.el6_6.rc4
  • samba4-winbind-0:4.0.0-66.el6_6.rc4
  • samba4-winbind-clients-0:4.0.0-66.el6_6.rc4
  • samba4-winbind-krb5-locator-0:4.0.0-66.el6_6.rc4
  • libsmbclient-0:3.6.23-14.el6_6
  • libsmbclient-devel-0:3.6.23-14.el6_6
  • samba-0:3.6.23-14.el6_6
  • samba-client-0:3.6.23-14.el6_6
  • samba-common-0:3.6.23-14.el6_6
  • samba-doc-0:3.6.23-14.el6_6
  • samba-domainjoin-gui-0:3.6.23-14.el6_6
  • samba-glusterfs-0:3.6.23-14.el6_6
  • samba-swat-0:3.6.23-14.el6_6
  • samba-winbind-0:3.6.23-14.el6_6
  • samba-winbind-clients-0:3.6.23-14.el6_6
  • samba-winbind-devel-0:3.6.23-14.el6_6
  • samba-winbind-krb5-locator-0:3.6.23-14.el6_6
  • libsmbclient-0:4.1.1-38.el7_0
  • libsmbclient-devel-0:4.1.1-38.el7_0
  • libwbclient-0:4.1.1-38.el7_0
  • libwbclient-devel-0:4.1.1-38.el7_0
  • samba-0:4.1.1-38.el7_0
  • samba-client-0:4.1.1-38.el7_0
  • samba-common-0:4.1.1-38.el7_0
  • samba-dc-0:4.1.1-38.el7_0
  • samba-dc-libs-0:4.1.1-38.el7_0
  • samba-devel-0:4.1.1-38.el7_0
  • samba-libs-0:4.1.1-38.el7_0
  • samba-pidl-0:4.1.1-38.el7_0
  • samba-python-0:4.1.1-38.el7_0
  • samba-test-0:4.1.1-38.el7_0
  • samba-test-devel-0:4.1.1-38.el7_0
  • samba-vfs-glusterfs-0:4.1.1-38.el7_0
  • samba-winbind-0:4.1.1-38.el7_0
  • samba-winbind-clients-0:4.1.1-38.el7_0
  • samba-winbind-krb5-locator-0:4.1.1-38.el7_0
  • samba-winbind-modules-0:4.1.1-38.el7_0
refmap via4
bid 72711
confirm
debian DSA-3171
gentoo GLSA-201502-15
hp
  • HPSBGN03288
  • HPSBUX03320
  • SSRT101952
  • SSRT101979
mandriva
  • MDVSA-2015:081
  • MDVSA-2015:082
sectrack 1031783
slackware SSA:2015-064-01
suse
  • SUSE-SU-2015:0353
  • SUSE-SU-2015:0371
  • SUSE-SU-2015:0386
  • openSUSE-SU-2015:0375
  • openSUSE-SU-2016:1064
  • openSUSE-SU-2016:1106
  • openSUSE-SU-2016:1107
ubuntu USN-2508-1
Last major update 07-12-2016 - 22:06
Published 23-02-2015 - 20:59
Back to Top