DeutschShown in its original language — a full translation is planned for a future version.
Samba: Mehrere Schwachstellen
view advisory published 2018-08-14
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Samba ausnutzen, um beliebigen Programmcode auszuführen, Informationen offenzulegen, Sicherheitsrestriktionen zu umgehen oder einen Denial of Service zu verursachen.
01
describes (5)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2018-10919US | medium6.5 | — | ||
The Samba Active Directory LDAP server was vulnerable to an information disclosure flaw because of missing access control checks. An authenticated attacker could use this flaw to e… | ||||
| CVE-2018-10918US | medium6.5 | — | ||
A null pointer dereference flaw was found in the way samba checked database outputs from the LDB database layer. An authenticated attacker could use this flaw to crash a samba serv… | ||||
| CVE-2018-10858US | high8.8 | — | ||
A heap-buffer overflow was found in the way samba clients processed extra long filename in a directory listing. A malicious samba server could use this flaw to cause arbitrary code… | ||||
| CVE-2018-1140US | medium6.5 | — | ||
A missing input sanitization flaw was found in the implementation of LDP database used for the LDAP server. An attacker could use this flaw to cause a denial of service against a s… | ||||
| CVE-2018-1139US | high8.1 | — | ||
A flaw was found in the way samba before 4.7.9 and 4.8.4 allowed the use of weak NTLMv1 authentication even when NTLMv1 was explicitly disabled. A man-in-the-middle attacker could… | ||||
02
references
External citations — patches, advisories, analysis.
- Oracle Linux Security Advisory ELSA-2018-3056 vom 2018-11-06external
- Debian Security Advisory dsa-4271external
- Ubuntu Security Notice USN-3738-1 vom 2018-08-13external
- Ubuntu Security Notice USN-3738-1 vom 2018-08-15external
- Red Hat Security Advisory RHSA-2018:3056 vom 2018-10-31external
- NetApp Security Advisory NTAP-20180814-0001 vom 2018-08-15external
- WID-SEC-W-2026-3118 - CSAF Versionself
- WID-SEC-2026-3118 - Portal Versionself
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan