CVE-2013-6442

Related Files

Red Hat Security Advisory 2014-0383-01

Posted Apr 9, 2014

Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2014-0383-01 - Samba is an open-source implementation of the Server Message Block or Common Internet File System protocol, which allows PC-compatible machines to share files, printers, and other information. It was found that certain Samba configurations did not enforce the password lockout mechanism. A remote attacker could use this flaw to perform password guessing attacks on Samba user accounts. Note: this flaw only affected Samba when deployed as a Primary Domain Controller. A flaw was found in Samba's "smbcacls" command, which is used to set or get ACLs on SMB file shares. Certain command line options of this command would incorrectly remove an ACL previously applied on a file or a directory, leaving the file or directory without the intended ACL.

tags | advisory, remote, protocol

systems | linux, redhat

advisories | CVE-2012-6150, CVE-2013-4496, CVE-2013-6442

SHA-256 | c19e6cdc1c86ce8d2d9ae6517afe1389434492cef52a2b207665af7e66b3427b

Download | Favorite | View

Slackware Security Advisory - samba Updates

Posted Mar 14, 2014

Authored by Slackware Security Team | Site slackware.com

Slackware Security Advisory - New samba packages are available for Slackware 14.0, 14.1, and -current to fix security issues.

tags | advisory

systems | linux, slackware

advisories | CVE-2013-4496, CVE-2013-6442

SHA-256 | aea64d7045b389cdf46050c3696732076ba95b733bd6138950d20fe7601a557e

Download | Favorite | View