Lucene search
Huawei TechnologiesHUAWEI-SA-20171129-01-SAMBAHistoryNov 29, 2017 - 12:00 a.m.
Security Advisory - Samba Remote Code Execution Vulnerability in Some Huawei Products
2017-11-2900:00:00
Huawei Technologies
www.huawei.com
39
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.973 High
EPSS
Percentile
99.9%
All versions of Samba from 3.5.0 onwards are vulnerable to a remote code execution vulnerability, allowing an authenticated attacker to upload a shared library to a writable share and execute arbitrary code remotely on a targeted system. Samba 4.6.4, 4.5.10 and 4.4.14 have been issued as security releases to correct the defect. (Vulnerability ID: HWPSIRT-2017-05176)
This vulnerability has been assigned a CVE ID: CVE-2017-7494.
Huawei has released software updates to fix this vulnerability. This advisory is available at the following link:
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171129-01-samba-en
Affected configurations
Node
huaweioceanstor_ismMatchv100r005c10
| CPE | Name | Operator | Version |
|---|---|---|---|
| oceanstor vtl6900 | eq | V100R005C10 |
Related
nessus
nessus
FreeBSD : samba -- remote code execution vulnerability (6f4d96c0-4062-11e7-b291-b499baebfeaf) (SambaCry)
2017-05-25 00:00:00
RHEL 6 / 7 : Storage Server (RHSA-2017:1273) (SambaCry)
2017-05-26 00:00:00
Oracle Linux 5 : samba3x (ELSA-2017-1272) (SambaCry)
2017-05-30 00:00:00
openvas
openvas
openSUSE: Security Advisory for samba (openSUSE-SU-2017:1415-1)
2017-05-27 00:00:00
Fedora Update for samba FEDORA-2017-570c0071c4
2017-05-27 00:00:00
RedHat Update for samba RHSA-2017:1270-01
2017-05-25 00:00:00
slackware
slackware
[slackware-security] samba
2017-05-24 20:34:46
redhatcve
redhatcve
CVE-2017-7494
2021-03-13 22:06:40
altlinux
altlinux
Security fix for the ALT Linux 8 package samba version 4.6.4-alt1
2017-05-24 00:00:00
Security fix for the ALT Linux 10 package samba version 4.6.4-alt1.S1
2017-05-24 00:00:00
Security fix for the ALT Linux 7 package samba-DC version 4.5.10-alt1.M70P.1
2017-05-25 00:00:00
osv
osv
CVE-2017-7494
2017-05-30 18:29:00
samba - security update
2017-05-24 00:00:00
samba - security update
2017-05-24 00:00:00
nvd
nvd
CVE-2017-7494
2017-05-30 18:29:00
thn
thn
7-Year-Old Samba Flaw Lets Hackers Access Thousands of Linux PCs Remotely
2017-05-24 20:23:00
New Linux Malware Exploits SambaCry Flaw to Silently Backdoor NAS Devices
2017-07-18 21:23:00
CowerSnail — Windows Backdoor from the Creators of SambaCry Linux Malware
2017-07-27 00:40:00
debiancve
debiancve
CVE-2017-7494
2017-05-30 18:29:00
redhat
redhat
(RHSA-2017:1390) Important: samba security update
2017-06-05 05:47:14
(RHSA-2017:1273) Important: samba security update
2017-05-24 07:27:07
(RHSA-2017:1272) Important: samba3x security update
2017-05-24 00:00:00
saint
saint
Samba shared library upload and execution
2017-06-08 00:00:00
Samba shared library upload and execution
2017-06-08 00:00:00
Samba shared library upload and execution
2017-06-08 00:00:00
packetstorm
packetstorm
Samba is_known_pipename() Arbitrary Module Load
2017-05-27 00:00:00
Samba 3.5.0 Remote Code Execution
2017-05-25 00:00:00
Samba is_known_pipename() Code Execution
2017-06-02 00:00:00
attackerkb
attackerkb
CVE-2017-7494
2017-05-30 00:00:00
ics
ics
Potential Legacy Risk from Malware Targeting QNAP NAS Devices
2020-08-06 12:00:00
metasploit
metasploit
Samba is_known_pipename() Arbitrary Module Load
2017-05-25 00:42:04
seebug
seebug
Samba remote code execution vulnerability(CVE-2017-7494)
2017-05-25 00:00:00
suse
suse
Security update for samba (important)
2017-05-24 21:12:15
Security update for samba (important)
2017-05-24 15:10:25
Security update for samba (important)
2017-05-26 18:09:30
cisa
cisa
Samba Releases Security Updates
2017-05-24 00:00:00
ibm
ibm
Security Bulletin: Vulnerability CVE-2017-7494 in Samba affects IBM i
2019-12-18 14:26:38
Security Bulletin: Samba vulnerability issue in IBM SONAS (CVE-2017-7494)
2018-06-18 00:34:57
Security Bulletin: Samba vulnerability issue on IBM Storwize V7000 Unified
2018-06-18 00:35:38
threatpost
threatpost
Samba Patches Critical Bug Exploitable With One Line Of Code
2017-05-25 12:20:32
Cisco, Netgear Readying Patches for Samba Vulnerability
2017-05-31 13:51:56
Attackers Mining Cryptocurrency Using Exploits for Samba Vulnerability
2017-06-12 09:34:17
oraclelinux
oraclelinux
samba4 security update
2017-05-24 00:00:00
samba security update
2017-05-24 00:00:00
samba3x security update
2017-05-26 00:00:00
prion
prion
Remote code execution
2017-05-30 18:29:00
rapid7community
rapid7community
Samba CVE-2017-7494: Scanning and Remediating in InsightVM and Nexpose
2017-05-25 21:22:37
Patching CVE-2017-7494 in Samba: It’s the Circle of Life
2017-05-27 02:51:04
cisco
cisco
Vulnerability in Samba Affecting Cisco Products: May 2017
2017-05-30 19:30:00
zdt
zdt
Samba 3.5.0 - Remote code execution Exploit
2017-05-25 00:00:00
Samba is_known_pipename() Arbitrary Module Load Exploit
2017-05-30 00:00:00
canvas
canvas
Immunity Canvas: SAMBA_IS_KNOWN_PIPENAME
2017-05-30 18:29:00
avleonov
avleonov
New vulnersBot for Telegram with advanced searches and subscriptions
2017-05-28 10:59:52
fedora
fedora
[SECURITY] Fedora 25 Update: samba-4.5.10-0.fc25
2017-05-27 03:06:08
[SECURITY] Fedora 24 Update: samba-4.4.14-0.fc24
2017-05-27 02:53:53
[SECURITY] Fedora 26 Update: samba-4.6.4-0.fc26
2017-06-03 17:39:59
cisa_kev
cisa_kev
Samba Remote Code Execution Vulnerability
2023-03-30 00:00:00
securelist
securelist
SambaCry is coming
2017-06-09 22:07:16
centos
centos
samba4 security update
2017-05-25 13:07:15
ctdb, libsmbclient, libwbclient, samba security update
2017-05-25 13:08:37
ubuntu
ubuntu
Samba vulnerability
2017-05-24 00:00:00
Samba vulnerability
2017-05-24 00:00:00
exploitpack
exploitpack
Samba 3.5.0 - Remote Code Execution
2017-05-24 00:00:00
samba
samba
Remote code execution from a writable share.
2017-05-24 00:00:00
myhack58
myhack58
Samba remote code execution vulnerability(CVE-2017-7494)-SambaCry analysis report-vulnerability warning-the black bar safety net
2017-05-28 00:00:00
Samba remote code execution vulnerability(CVE-2017-7494)analysis-vulnerability warning-the black bar safety net
2017-05-25 00:00:00
SambaCry exploit analysis-exploit warning-the black bar safety net
2017-06-13 00:00:00
freebsd
freebsd
samba -- remote code execution vulnerability
2017-05-24 00:00:00
huawei
huawei
alpinelinux
alpinelinux
CVE-2017-7494
2017-05-30 18:29:00
debian
debian
[SECURITY] [DLA 951-1] samba security update
2017-05-24 08:11:20
[SECURITY] [DSA 3860-1] samba security update
2017-05-24 07:35:00
[SECURITY] [DSA 3860-1] samba security update
2017-05-24 07:35:00
talosblog
talosblog
Samba Vulnerability: Dancing Its Way to a Network Near You
2017-05-25 00:31:00
f5
f5
K13551136 : Samba remote code execution vulnerability CVE-2017-7494
2017-05-25 00:00:00
cvelist
cvelist
CVE-2017-7494
2017-05-30 18:00:00
qualysblog
qualysblog
Samba Vulnerability CVE-2017-7494
2017-05-26 20:32:57
cve
cve
CVE-2017-7494
2017-05-30 18:29:00
checkpoint_advisories
checkpoint_advisories
Linux EternalRed Samba Remote Code Execution (CVE-2017-7494)
2017-05-25 00:00:00
veracode
veracode
Remote Code Execution (RCE)
2019-01-15 09:17:29
ubuntucve
ubuntucve
CVE-2017-7494
2017-05-24 00:00:00
archlinux
archlinux
[ASA-201705-22] samba: arbitrary code execution
2017-05-30 00:00:00
exploitdb
exploitdb
Samba 3.5.0 < 4.4.14/4.5.10/4.6.4 - 'is_known_pipename()' Arbitrary Module Load (Metasploit)
2017-05-29 00:00:00
Samba 3.5.0 - Remote Code Execution
2017-05-24 00:00:00
nmap
nmap
traceroute-geolocation NSE Script
2012-04-17 19:39:27
http-dombased-xss NSE Script
2013-08-10 19:30:56
broadcast-dns-service-discovery NSE Script
2010-11-02 17:22:38
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.973 High
EPSS
Percentile
99.9%
Related for HUAWEI-SA-20171129-01-SAMBA