Lucene search
This script is Copyright (C) 2017-2023 and is owned by Tenable, Inc. or an Affiliate thereof.REDHAT-RHSA-2017-1390.NASLHistoryJun 06, 2017 - 12:00 a.m.
RHEL 6 / 7 : samba (RHSA-2017:1390) (SambaCry)
2017-06-0600:00:00
This script is Copyright (C) 2017-2023 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
95
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.973
Percentile
99.9%
An update for samba is now available for Red Hat Enterprise Linux 6.2 Advanced Update Support, Red Hat Enterprise Linux 6.4 Advanced Update Support, Red Hat Enterprise Linux 6.5 Advanced Update Support, Red Hat Enterprise Linux 6.5 Telco Extended Update Support, Red Hat Enterprise Linux 6.6 Advanced Update Support, Red Hat Enterprise Linux 6.6 Telco Extended Update Support, Red Hat Enterprise Linux 6.7 Extended Update Support, and Red Hat Enterprise Linux 7.2 Extended Update Support.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Samba is an open source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.
Security Fix(es) :
- A remote code execution flaw was found in Samba. A malicious authenticated samba client, having write access to the samba share, could use this flaw to execute arbitrary code as root. (CVE-2017-7494)
Red Hat would like to thank the Samba project for reporting this issue. Upstream acknowledges steelo as the original reporter.
#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from Red Hat Security Advisory RHSA-2017:1390. The text
# itself is copyright (C) Red Hat, Inc.
#
include('compat.inc');
if (description)
{
script_id(100631);
script_version("3.20");
script_set_attribute(attribute:"plugin_modification_date", value:"2023/03/30");
script_cve_id("CVE-2017-7494");
script_xref(name:"RHSA", value:"2017:1390");
script_xref(name:"CISA-KNOWN-EXPLOITED", value:"2023/04/20");
script_name(english:"RHEL 6 / 7 : samba (RHSA-2017:1390) (SambaCry)");
script_set_attribute(attribute:"synopsis", value:
"The remote Red Hat host is missing one or more security updates.");
script_set_attribute(attribute:"description", value:
"An update for samba is now available for Red Hat Enterprise Linux 6.2
Advanced Update Support, Red Hat Enterprise Linux 6.4 Advanced Update
Support, Red Hat Enterprise Linux 6.5 Advanced Update Support, Red Hat
Enterprise Linux 6.5 Telco Extended Update Support, Red Hat Enterprise
Linux 6.6 Advanced Update Support, Red Hat Enterprise Linux 6.6 Telco
Extended Update Support, Red Hat Enterprise Linux 6.7 Extended Update
Support, and Red Hat Enterprise Linux 7.2 Extended Update Support.
Red Hat Product Security has rated this update as having a security
impact of Important. A Common Vulnerability Scoring System (CVSS) base
score, which gives a detailed severity rating, is available for each
vulnerability from the CVE link(s) in the References section.
Samba is an open source implementation of the Server Message Block
(SMB) protocol and the related Common Internet File System (CIFS)
protocol, which allow PC-compatible machines to share files, printers,
and various information.
Security Fix(es) :
* A remote code execution flaw was found in Samba. A malicious
authenticated samba client, having write access to the samba share,
could use this flaw to execute arbitrary code as root. (CVE-2017-7494)
Red Hat would like to thank the Samba project for reporting this
issue. Upstream acknowledges steelo as the original reporter.");
script_set_attribute(attribute:"see_also", value:"https://www.samba.org/samba/security/CVE-2017-7494.html");
script_set_attribute(attribute:"see_also", value:"https://access.redhat.com/security/vulnerabilities/3034621");
script_set_attribute(attribute:"see_also", value:"https://access.redhat.com/errata/RHSA-2017:1390");
script_set_attribute(attribute:"see_also", value:"https://access.redhat.com/security/cve/cve-2017-7494");
script_set_attribute(attribute:"solution", value:
"Update the affected packages.");
script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C");
script_set_cvss_temporal_vector("CVSS2#E:H/RL:OF/RC:C");
script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H");
script_set_cvss3_temporal_vector("CVSS:3.0/E:H/RL:O/RC:C");
script_set_attribute(attribute:"cvss_score_source", value:"CVE-2017-7494");
script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available");
script_set_attribute(attribute:"exploit_available", value:"true");
script_set_attribute(attribute:"exploit_framework_core", value:"true");
script_set_attribute(attribute:"metasploit_name", value:'Samba is_known_pipename() Arbitrary Module Load');
script_set_attribute(attribute:"exploit_framework_metasploit", value:"true");
script_set_attribute(attribute:"exploit_framework_canvas", value:"true");
script_set_attribute(attribute:"canvas_package", value:"CANVAS");
script_set_attribute(attribute:"in_the_news", value:"true");
script_set_attribute(attribute:"vuln_publication_date", value:"2017/05/30");
script_set_attribute(attribute:"patch_publication_date", value:"2017/06/05");
script_set_attribute(attribute:"plugin_publication_date", value:"2017/06/06");
script_set_attribute(attribute:"plugin_type", value:"local");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:ctdb");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:ctdb-devel");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:ctdb-tests");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:libsmbclient");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:libsmbclient-devel");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:libwbclient");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:libwbclient-devel");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:samba");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:samba-client");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:samba-client-libs");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:samba-common");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:samba-common-libs");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:samba-common-tools");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:samba-dc");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:samba-dc-libs");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:samba-debuginfo");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:samba-devel");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:samba-doc");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:samba-domainjoin-gui");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:samba-glusterfs");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:samba-libs");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:samba-pidl");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:samba-python");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:samba-swat");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:samba-test");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:samba-test-devel");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:samba-test-libs");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:samba-vfs-glusterfs");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:samba-winbind");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:samba-winbind-clients");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:samba-winbind-devel");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:samba-winbind-krb5-locator");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:samba-winbind-modules");
script_set_attribute(attribute:"cpe", value:"cpe:/o:redhat:enterprise_linux:6.2");
script_set_attribute(attribute:"cpe", value:"cpe:/o:redhat:enterprise_linux:6.4");
script_set_attribute(attribute:"cpe", value:"cpe:/o:redhat:enterprise_linux:6.5");
script_set_attribute(attribute:"cpe", value:"cpe:/o:redhat:enterprise_linux:6.6");
script_set_attribute(attribute:"cpe", value:"cpe:/o:redhat:enterprise_linux:6.7");
script_set_attribute(attribute:"cpe", value:"cpe:/o:redhat:enterprise_linux:7.2");
script_set_attribute(attribute:"generated_plugin", value:"current");
script_end_attributes();
script_category(ACT_GATHER_INFO);
script_family(english:"Red Hat Local Security Checks");
script_copyright(english:"This script is Copyright (C) 2017-2023 and is owned by Tenable, Inc. or an Affiliate thereof.");
script_dependencies("ssh_get_info.nasl");
script_require_keys("Host/local_checks_enabled", "Host/RedHat/release", "Host/RedHat/rpm-list", "Host/cpu");
exit(0);
}
include("audit.inc");
include("global_settings.inc");
include("misc_func.inc");
include("rpm.inc");
if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
release = get_kb_item("Host/RedHat/release");
if (isnull(release) || "Red Hat" >!< release) audit(AUDIT_OS_NOT, "Red Hat");
os_ver = pregmatch(pattern: "Red Hat Enterprise Linux.*release ([0-9]+(\.[0-9]+)?)", string:release);
if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "Red Hat");
os_ver = os_ver[1];
if (! preg(pattern:"^(6\.2|6\.4|6\.5|6\.6|6\.7|7\.2)([^0-9]|$)", string:os_ver)) audit(AUDIT_OS_NOT, "Red Hat 6.2 / 6.4 / 6.5 / 6.6 / 6.7 / 7.2", "Red Hat " + os_ver);
if (!get_kb_item("Host/RedHat/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);
cpu = get_kb_item("Host/cpu");
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if ("x86_64" >!< cpu && cpu !~ "^i[3-6]86$" && "s390" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "Red Hat", cpu);
yum_updateinfo = get_kb_item("Host/RedHat/yum-updateinfo");
if (!empty_or_null(yum_updateinfo))
{
rhsa = "RHSA-2017:1390";
yum_report = redhat_generate_yum_updateinfo_report(rhsa:rhsa);
if (!empty_or_null(yum_report))
{
security_report_v4(
port : 0,
severity : SECURITY_HOLE,
extra : yum_report
);
exit(0);
}
else
{
audit_message = "affected by Red Hat security advisory " + rhsa;
audit(AUDIT_OS_NOT, audit_message);
}
}
else
{ sp = get_kb_item("Host/RedHat/minor_release");
if (isnull(sp)) audit(AUDIT_UNKNOWN_APP_VER, "Red Hat");
flag = 0;
if (rpm_check(release:"RHEL6", sp:"7", cpu:"x86_64", reference:"ctdb-4.2.10-11.el7_2")) flag++;
if (rpm_check(release:"RHEL6", sp:"7", cpu:"i686", reference:"ctdb-devel-4.2.10-11.el7_2")) flag++;
if (rpm_check(release:"RHEL6", sp:"7", cpu:"x86_64", reference:"ctdb-devel-4.2.10-11.el7_2")) flag++;
if (rpm_check(release:"RHEL6", sp:"7", cpu:"x86_64", reference:"ctdb-tests-4.2.10-11.el7_2")) flag++;
if (rpm_check(release:"RHEL6", sp:"7", reference:"libsmbclient-3.6.23-32.el6_7")) flag++;
if (rpm_check(release:"RHEL6", sp:"6", cpu:"i686", reference:"libsmbclient-3.6.23-32.el6_6")) flag++;
if (rpm_check(release:"RHEL6", sp:"4", cpu:"i686", reference:"libsmbclient-3.6.23-32.el6_4")) flag++;
if (rpm_check(release:"RHEL6", sp:"2", cpu:"i686", reference:"libsmbclient-3.6.23-32.el6_2")) flag++;
if (rpm_check(release:"RHEL6", sp:"5", cpu:"i686", reference:"libsmbclient-3.6.23-32.el6_5")) flag++;
if (rpm_check(release:"RHEL6", sp:"6", cpu:"x86_64", reference:"libsmbclient-3.6.23-32.el6_6")) flag++;
if (rpm_check(release:"RHEL6", sp:"4", cpu:"x86_64", reference:"libsmbclient-3.6.23-32.el6_4")) flag++;
if (rpm_check(release:"RHEL6", sp:"2", cpu:"x86_64", reference:"libsmbclient-3.6.23-32.el6_2")) flag++;
if (rpm_check(release:"RHEL6", sp:"5", cpu:"x86_64", reference:"libsmbclient-3.6.23-32.el6_5")) flag++;
if (rpm_check(release:"RHEL6", sp:"7", reference:"libsmbclient-devel-3.6.23-32.el6_7")) flag++;
if (rpm_check(release:"RHEL6", sp:"6", cpu:"i686", reference:"libsmbclient-devel-3.6.23-32.el6_6")) flag++;
if (rpm_check(release:"RHEL6", sp:"4", cpu:"i686", reference:"libsmbclient-devel-3.6.23-32.el6_4")) flag++;
if (rpm_check(release:"RHEL6", sp:"2", cpu:"i686", reference:"libsmbclient-devel-3.6.23-32.el6_2")) flag++;
if (rpm_check(release:"RHEL6", sp:"5", cpu:"i686", reference:"libsmbclient-devel-3.6.23-32.el6_5")) flag++;
if (rpm_check(release:"RHEL6", sp:"6", cpu:"x86_64", reference:"libsmbclient-devel-3.6.23-32.el6_6")) flag++;
if (rpm_check(release:"RHEL6", sp:"4", cpu:"x86_64", reference:"libsmbclient-devel-3.6.23-32.el6_4")) flag++;
if (rpm_check(release:"RHEL6", sp:"2", cpu:"x86_64", reference:"libsmbclient-devel-3.6.23-32.el6_2")) flag++;
if (rpm_check(release:"RHEL6", sp:"5", cpu:"x86_64", reference:"libsmbclient-devel-3.6.23-32.el6_5")) flag++;
if (rpm_check(release:"RHEL6", sp:"7", cpu:"i686", reference:"samba-3.6.23-32.el6_7")) flag++;
if (rpm_check(release:"RHEL6", sp:"7", cpu:"s390x", reference:"samba-3.6.23-32.el6_7")) flag++;
if (rpm_check(release:"RHEL6", sp:"6", cpu:"x86_64", reference:"samba-3.6.23-32.el6_6")) flag++;
if (rpm_check(release:"RHEL6", sp:"4", cpu:"x86_64", reference:"samba-3.6.23-32.el6_4")) flag++;
if (rpm_check(release:"RHEL6", sp:"7", cpu:"x86_64", reference:"samba-3.6.23-32.el6_7")) flag++;
if (rpm_check(release:"RHEL6", sp:"2", cpu:"x86_64", reference:"samba-3.6.23-32.el6_2")) flag++;
if (rpm_check(release:"RHEL6", sp:"5", cpu:"x86_64", reference:"samba-3.6.23-32.el6_5")) flag++;
if (rpm_check(release:"RHEL6", sp:"7", cpu:"i686", reference:"samba-client-3.6.23-32.el6_7")) flag++;
if (rpm_check(release:"RHEL6", sp:"7", cpu:"s390x", reference:"samba-client-3.6.23-32.el6_7")) flag++;
if (rpm_check(release:"RHEL6", sp:"6", cpu:"x86_64", reference:"samba-client-3.6.23-32.el6_6")) flag++;
if (rpm_check(release:"RHEL6", sp:"4", cpu:"x86_64", reference:"samba-client-3.6.23-32.el6_4")) flag++;
if (rpm_check(release:"RHEL6", sp:"7", cpu:"x86_64", reference:"samba-client-3.6.23-32.el6_7")) flag++;
if (rpm_check(release:"RHEL6", sp:"2", cpu:"x86_64", reference:"samba-client-3.6.23-32.el6_2")) flag++;
if (rpm_check(release:"RHEL6", sp:"5", cpu:"x86_64", reference:"samba-client-3.6.23-32.el6_5")) flag++;
if (rpm_check(release:"RHEL6", sp:"7", reference:"samba-common-3.6.23-32.el6_7")) flag++;
if (rpm_check(release:"RHEL6", sp:"6", cpu:"i686", reference:"samba-common-3.6.23-32.el6_6")) flag++;
if (rpm_check(release:"RHEL6", sp:"4", cpu:"i686", reference:"samba-common-3.6.23-32.el6_4")) flag++;
if (rpm_check(release:"RHEL6", sp:"2", cpu:"i686", reference:"samba-common-3.6.23-32.el6_2")) flag++;
if (rpm_check(release:"RHEL6", sp:"5", cpu:"i686", reference:"samba-common-3.6.23-32.el6_5")) flag++;
if (rpm_check(release:"RHEL6", sp:"6", cpu:"x86_64", reference:"samba-common-3.6.23-32.el6_6")) flag++;
if (rpm_check(release:"RHEL6", sp:"4", cpu:"x86_64", reference:"samba-common-3.6.23-32.el6_4")) flag++;
if (rpm_check(release:"RHEL6", sp:"2", cpu:"x86_64", reference:"samba-common-3.6.23-32.el6_2")) flag++;
if (rpm_check(release:"RHEL6", sp:"5", cpu:"x86_64", reference:"samba-common-3.6.23-32.el6_5")) flag++;
if (rpm_check(release:"RHEL6", sp:"7", reference:"samba-debuginfo-3.6.23-32.el6_7")) flag++;
if (rpm_check(release:"RHEL6", sp:"6", cpu:"i686", reference:"samba-debuginfo-3.6.23-32.el6_6")) flag++;
if (rpm_check(release:"RHEL6", sp:"4", cpu:"i686", reference:"samba-debuginfo-3.6.23-32.el6_4")) flag++;
if (rpm_check(release:"RHEL6", sp:"2", cpu:"i686", reference:"samba-debuginfo-3.6.23-32.el6_2")) flag++;
if (rpm_check(release:"RHEL6", sp:"5", cpu:"i686", reference:"samba-debuginfo-3.6.23-32.el6_5")) flag++;
if (rpm_check(release:"RHEL6", sp:"6", cpu:"x86_64", reference:"samba-debuginfo-3.6.23-32.el6_6")) flag++;
if (rpm_check(release:"RHEL6", sp:"4", cpu:"x86_64", reference:"samba-debuginfo-3.6.23-32.el6_4")) flag++;
if (rpm_check(release:"RHEL6", sp:"2", cpu:"x86_64", reference:"samba-debuginfo-3.6.23-32.el6_2")) flag++;
if (rpm_check(release:"RHEL6", sp:"5", cpu:"x86_64", reference:"samba-debuginfo-3.6.23-32.el6_5")) flag++;
if (rpm_check(release:"RHEL6", sp:"7", cpu:"i686", reference:"samba-doc-3.6.23-32.el6_7")) flag++;
if (rpm_check(release:"RHEL6", sp:"7", cpu:"s390x", reference:"samba-doc-3.6.23-32.el6_7")) flag++;
if (rpm_check(release:"RHEL6", sp:"6", cpu:"x86_64", reference:"samba-doc-3.6.23-32.el6_6")) flag++;
if (rpm_check(release:"RHEL6", sp:"4", cpu:"x86_64", reference:"samba-doc-3.6.23-32.el6_4")) flag++;
if (rpm_check(release:"RHEL6", sp:"7", cpu:"x86_64", reference:"samba-doc-3.6.23-32.el6_7")) flag++;
if (rpm_check(release:"RHEL6", sp:"2", cpu:"x86_64", reference:"samba-doc-3.6.23-32.el6_2")) flag++;
if (rpm_check(release:"RHEL6", sp:"5", cpu:"x86_64", reference:"samba-doc-3.6.23-32.el6_5")) flag++;
if (rpm_check(release:"RHEL6", sp:"7", cpu:"i686", reference:"samba-domainjoin-gui-3.6.23-32.el6_7")) flag++;
if (rpm_check(release:"RHEL6", sp:"7", cpu:"s390x", reference:"samba-domainjoin-gui-3.6.23-32.el6_7")) flag++;
if (rpm_check(release:"RHEL6", sp:"6", cpu:"x86_64", reference:"samba-domainjoin-gui-3.6.23-32.el6_6")) flag++;
if (rpm_check(release:"RHEL6", sp:"4", cpu:"x86_64", reference:"samba-domainjoin-gui-3.6.23-32.el6_4")) flag++;
if (rpm_check(release:"RHEL6", sp:"7", cpu:"x86_64", reference:"samba-domainjoin-gui-3.6.23-32.el6_7")) flag++;
if (rpm_check(release:"RHEL6", sp:"2", cpu:"x86_64", reference:"samba-domainjoin-gui-3.6.23-32.el6_2")) flag++;
if (rpm_check(release:"RHEL6", sp:"5", cpu:"x86_64", reference:"samba-domainjoin-gui-3.6.23-32.el6_5")) flag++;
if (rpm_check(release:"RHEL6", sp:"7", cpu:"x86_64", reference:"samba-glusterfs-3.6.23-32.el6_7")) flag++;
if (rpm_check(release:"RHEL6", sp:"7", cpu:"i686", reference:"samba-swat-3.6.23-32.el6_7")) flag++;
if (rpm_check(release:"RHEL6", sp:"7", cpu:"s390x", reference:"samba-swat-3.6.23-32.el6_7")) flag++;
if (rpm_check(release:"RHEL6", sp:"6", cpu:"x86_64", reference:"samba-swat-3.6.23-32.el6_6")) flag++;
if (rpm_check(release:"RHEL6", sp:"4", cpu:"x86_64", reference:"samba-swat-3.6.23-32.el6_4")) flag++;
if (rpm_check(release:"RHEL6", sp:"7", cpu:"x86_64", reference:"samba-swat-3.6.23-32.el6_7")) flag++;
if (rpm_check(release:"RHEL6", sp:"2", cpu:"x86_64", reference:"samba-swat-3.6.23-32.el6_2")) flag++;
if (rpm_check(release:"RHEL6", sp:"5", cpu:"x86_64", reference:"samba-swat-3.6.23-32.el6_5")) flag++;
if (rpm_check(release:"RHEL6", sp:"7", cpu:"i686", reference:"samba-winbind-3.6.23-32.el6_7")) flag++;
if (rpm_check(release:"RHEL6", sp:"7", cpu:"s390x", reference:"samba-winbind-3.6.23-32.el6_7")) flag++;
if (rpm_check(release:"RHEL6", sp:"6", cpu:"x86_64", reference:"samba-winbind-3.6.23-32.el6_6")) flag++;
if (rpm_check(release:"RHEL6", sp:"4", cpu:"x86_64", reference:"samba-winbind-3.6.23-32.el6_4")) flag++;
if (rpm_check(release:"RHEL6", sp:"7", cpu:"x86_64", reference:"samba-winbind-3.6.23-32.el6_7")) flag++;
if (rpm_check(release:"RHEL6", sp:"2", cpu:"x86_64", reference:"samba-winbind-3.6.23-32.el6_2")) flag++;
if (rpm_check(release:"RHEL6", sp:"5", cpu:"x86_64", reference:"samba-winbind-3.6.23-32.el6_5")) flag++;
if (rpm_check(release:"RHEL6", sp:"7", reference:"samba-winbind-clients-3.6.23-32.el6_7")) flag++;
if (rpm_check(release:"RHEL6", sp:"6", cpu:"i686", reference:"samba-winbind-clients-3.6.23-32.el6_6")) flag++;
if (rpm_check(release:"RHEL6", sp:"4", cpu:"i686", reference:"samba-winbind-clients-3.6.23-32.el6_4")) flag++;
if (rpm_check(release:"RHEL6", sp:"2", cpu:"i686", reference:"samba-winbind-clients-3.6.23-32.el6_2")) flag++;
if (rpm_check(release:"RHEL6", sp:"5", cpu:"i686", reference:"samba-winbind-clients-3.6.23-32.el6_5")) flag++;
if (rpm_check(release:"RHEL6", sp:"6", cpu:"x86_64", reference:"samba-winbind-clients-3.6.23-32.el6_6")) flag++;
if (rpm_check(release:"RHEL6", sp:"4", cpu:"x86_64", reference:"samba-winbind-clients-3.6.23-32.el6_4")) flag++;
if (rpm_check(release:"RHEL6", sp:"2", cpu:"x86_64", reference:"samba-winbind-clients-3.6.23-32.el6_2")) flag++;
if (rpm_check(release:"RHEL6", sp:"5", cpu:"x86_64", reference:"samba-winbind-clients-3.6.23-32.el6_5")) flag++;
if (rpm_check(release:"RHEL6", sp:"7", reference:"samba-winbind-devel-3.6.23-32.el6_7")) flag++;
if (rpm_check(release:"RHEL6", sp:"6", cpu:"i686", reference:"samba-winbind-devel-3.6.23-32.el6_6")) flag++;
if (rpm_check(release:"RHEL6", sp:"4", cpu:"i686", reference:"samba-winbind-devel-3.6.23-32.el6_4")) flag++;
if (rpm_check(release:"RHEL6", sp:"2", cpu:"i686", reference:"samba-winbind-devel-3.6.23-32.el6_2")) flag++;
if (rpm_check(release:"RHEL6", sp:"5", cpu:"i686", reference:"samba-winbind-devel-3.6.23-32.el6_5")) flag++;
if (rpm_check(release:"RHEL6", sp:"6", cpu:"x86_64", reference:"samba-winbind-devel-3.6.23-32.el6_6")) flag++;
if (rpm_check(release:"RHEL6", sp:"4", cpu:"x86_64", reference:"samba-winbind-devel-3.6.23-32.el6_4")) flag++;
if (rpm_check(release:"RHEL6", sp:"2", cpu:"x86_64", reference:"samba-winbind-devel-3.6.23-32.el6_2")) flag++;
if (rpm_check(release:"RHEL6", sp:"5", cpu:"x86_64", reference:"samba-winbind-devel-3.6.23-32.el6_5")) flag++;
if (rpm_check(release:"RHEL6", sp:"7", cpu:"i686", reference:"samba-winbind-krb5-locator-3.6.23-32.el6_7")) flag++;
if (rpm_check(release:"RHEL6", sp:"7", cpu:"s390x", reference:"samba-winbind-krb5-locator-3.6.23-32.el6_7")) flag++;
if (rpm_check(release:"RHEL6", sp:"6", cpu:"x86_64", reference:"samba-winbind-krb5-locator-3.6.23-32.el6_6")) flag++;
if (rpm_check(release:"RHEL6", sp:"4", cpu:"x86_64", reference:"samba-winbind-krb5-locator-3.6.23-32.el6_4")) flag++;
if (rpm_check(release:"RHEL6", sp:"7", cpu:"x86_64", reference:"samba-winbind-krb5-locator-3.6.23-32.el6_7")) flag++;
if (rpm_check(release:"RHEL6", sp:"2", cpu:"x86_64", reference:"samba-winbind-krb5-locator-3.6.23-32.el6_2")) flag++;
if (rpm_check(release:"RHEL6", sp:"5", cpu:"x86_64", reference:"samba-winbind-krb5-locator-3.6.23-32.el6_5")) flag++;
if (rpm_check(release:"RHEL7", sp:"2", reference:"libsmbclient-4.2.10-11.el7_2")) flag++;
if (rpm_check(release:"RHEL7", sp:"2", reference:"libsmbclient-devel-4.2.10-11.el7_2")) flag++;
if (rpm_check(release:"RHEL7", sp:"2", reference:"libwbclient-4.2.10-11.el7_2")) flag++;
if (rpm_check(release:"RHEL7", sp:"2", reference:"libwbclient-devel-4.2.10-11.el7_2")) flag++;
if (rpm_check(release:"RHEL7", sp:"2", cpu:"s390x", reference:"samba-4.2.10-11.el7_2")) flag++;
if (rpm_check(release:"RHEL7", sp:"2", cpu:"x86_64", reference:"samba-4.2.10-11.el7_2")) flag++;
if (rpm_check(release:"RHEL7", sp:"2", cpu:"s390x", reference:"samba-client-4.2.10-11.el7_2")) flag++;
if (rpm_check(release:"RHEL7", sp:"2", cpu:"x86_64", reference:"samba-client-4.2.10-11.el7_2")) flag++;
if (rpm_check(release:"RHEL7", sp:"2", reference:"samba-client-libs-4.2.10-11.el7_2")) flag++;
if (rpm_check(release:"RHEL7", sp:"2", reference:"samba-common-4.2.10-11.el7_2")) flag++;
if (rpm_check(release:"RHEL7", sp:"2", cpu:"s390x", reference:"samba-common-libs-4.2.10-11.el7_2")) flag++;
if (rpm_check(release:"RHEL7", sp:"2", cpu:"x86_64", reference:"samba-common-libs-4.2.10-11.el7_2")) flag++;
if (rpm_check(release:"RHEL7", sp:"2", cpu:"s390x", reference:"samba-common-tools-4.2.10-11.el7_2")) flag++;
if (rpm_check(release:"RHEL7", sp:"2", cpu:"x86_64", reference:"samba-common-tools-4.2.10-11.el7_2")) flag++;
if (rpm_check(release:"RHEL7", sp:"2", cpu:"s390x", reference:"samba-dc-4.2.10-11.el7_2")) flag++;
if (rpm_check(release:"RHEL7", sp:"2", cpu:"x86_64", reference:"samba-dc-4.2.10-11.el7_2")) flag++;
if (rpm_check(release:"RHEL7", sp:"2", cpu:"s390x", reference:"samba-dc-libs-4.2.10-11.el7_2")) flag++;
if (rpm_check(release:"RHEL7", sp:"2", cpu:"x86_64", reference:"samba-dc-libs-4.2.10-11.el7_2")) flag++;
if (rpm_check(release:"RHEL7", sp:"2", reference:"samba-debuginfo-4.2.10-11.el7_2")) flag++;
if (rpm_check(release:"RHEL7", sp:"2", reference:"samba-devel-4.2.10-11.el7_2")) flag++;
if (rpm_check(release:"RHEL7", sp:"2", reference:"samba-libs-4.2.10-11.el7_2")) flag++;
if (rpm_check(release:"RHEL7", sp:"2", reference:"samba-pidl-4.2.10-11.el7_2")) flag++;
if (rpm_check(release:"RHEL7", sp:"2", cpu:"s390x", reference:"samba-python-4.2.10-11.el7_2")) flag++;
if (rpm_check(release:"RHEL7", sp:"2", cpu:"x86_64", reference:"samba-python-4.2.10-11.el7_2")) flag++;
if (rpm_check(release:"RHEL7", sp:"2", cpu:"s390x", reference:"samba-test-4.2.10-11.el7_2")) flag++;
if (rpm_check(release:"RHEL7", sp:"2", cpu:"x86_64", reference:"samba-test-4.2.10-11.el7_2")) flag++;
if (rpm_check(release:"RHEL7", sp:"2", cpu:"s390x", reference:"samba-test-devel-4.2.10-11.el7_2")) flag++;
if (rpm_check(release:"RHEL7", sp:"2", cpu:"x86_64", reference:"samba-test-devel-4.2.10-11.el7_2")) flag++;
if (rpm_check(release:"RHEL7", sp:"2", reference:"samba-test-libs-4.2.10-11.el7_2")) flag++;
if (rpm_check(release:"RHEL7", sp:"2", cpu:"x86_64", reference:"samba-vfs-glusterfs-4.2.10-11.el7_2")) flag++;
if (rpm_check(release:"RHEL7", sp:"2", cpu:"s390x", reference:"samba-winbind-4.2.10-11.el7_2")) flag++;
if (rpm_check(release:"RHEL7", sp:"2", cpu:"x86_64", reference:"samba-winbind-4.2.10-11.el7_2")) flag++;
if (rpm_check(release:"RHEL7", sp:"2", cpu:"s390x", reference:"samba-winbind-clients-4.2.10-11.el7_2")) flag++;
if (rpm_check(release:"RHEL7", sp:"2", cpu:"x86_64", reference:"samba-winbind-clients-4.2.10-11.el7_2")) flag++;
if (rpm_check(release:"RHEL7", sp:"2", cpu:"s390x", reference:"samba-winbind-krb5-locator-4.2.10-11.el7_2")) flag++;
if (rpm_check(release:"RHEL7", sp:"2", cpu:"x86_64", reference:"samba-winbind-krb5-locator-4.2.10-11.el7_2")) flag++;
if (rpm_check(release:"RHEL7", sp:"2", reference:"samba-winbind-modules-4.2.10-11.el7_2")) flag++;
if (flag)
{
security_report_v4(
port : 0,
severity : SECURITY_HOLE,
extra : rpm_report_get() + redhat_report_package_caveat()
);
exit(0);
}
else
{
tested = pkg_tests_get();
if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
else audit(AUDIT_PACKAGE_NOT_INSTALLED, "ctdb / ctdb-devel / ctdb-tests / libsmbclient / libsmbclient-devel / etc");
}
}
| Vendor | Product | Version | CPE |
|---|---|---|---|
| redhat | enterprise_linux | samba-swat | p-cpe:/a:redhat:enterprise_linux:samba-swat |
| redhat | enterprise_linux | samba-common | p-cpe:/a:redhat:enterprise_linux:samba-common |
| redhat | enterprise_linux | samba-winbind-modules | p-cpe:/a:redhat:enterprise_linux:samba-winbind-modules |
| redhat | enterprise_linux | samba-client | p-cpe:/a:redhat:enterprise_linux:samba-client |
| redhat | enterprise_linux | samba-client-libs | p-cpe:/a:redhat:enterprise_linux:samba-client-libs |
| redhat | enterprise_linux | samba-vfs-glusterfs | p-cpe:/a:redhat:enterprise_linux:samba-vfs-glusterfs |
| redhat | enterprise_linux | samba-debuginfo | p-cpe:/a:redhat:enterprise_linux:samba-debuginfo |
| redhat | enterprise_linux | samba-winbind-clients | p-cpe:/a:redhat:enterprise_linux:samba-winbind-clients |
| redhat | enterprise_linux | samba-libs | p-cpe:/a:redhat:enterprise_linux:samba-libs |
| redhat | enterprise_linux | samba-test | p-cpe:/a:redhat:enterprise_linux:samba-test |
Related
altlinux
altlinux
Security fix for the ALT Linux 7 package samba-DC version 4.5.10-alt1.M70P.1
2017-05-25 00:00:00
Security fix for the ALT Linux 10 package samba version 4.6.4-alt1.S1
2017-05-24 00:00:00
Security fix for the ALT Linux 8 package samba version 4.6.4-alt1
2017-05-24 00:00:00
ibm
ibm
Security Bulletin: Vulnerability CVE-2017-7494 in Samba affects IBM i
2019-12-18 14:26:38
Security Bulletin: Open Source Samba Samba Vulnerabilities which is used by IBM OS Images for RedHat Linux in IBM PureApplication Systems (CVE-2017-7494)
2018-06-15 07:08:02
Security Bulletin: Samba vulnerability issue in IBM SONAS (CVE-2017-7494)
2018-06-18 00:34:57
redhat
redhat
(RHSA-2017:1272) Important: samba3x security update
2017-05-24 00:00:00
(RHSA-2017:1273) Important: samba security update
2017-05-24 07:27:07
(RHSA-2017:1390) Important: samba security update
2017-06-05 05:47:14
prion
prion
Remote code execution
2017-05-30 18:29:00
cisa
cisa
Samba Releases Security Updates
2017-05-24 00:00:00
cisco
cisco
Vulnerability in Samba Affecting Cisco Products: May 2017
2017-05-30 19:30:00
openvas
openvas
Ubuntu: Security Advisory (USN-3296-1)
2017-05-25 00:00:00
Ubuntu: Security Advisory (USN-3296-2)
2022-08-26 00:00:00
SUSE: Security Advisory (SUSE-SU-2017:1391-1)
2021-06-09 00:00:00
nessus
nessus
openSUSE Security Update : samba (openSUSE-2017-618) (SambaCry)
2017-05-30 00:00:00
Fedora 25 : 2:samba (2017-642a0eca75) (SambaCry)
2017-05-30 00:00:00
avleonov
avleonov
New vulnersBot for Telegram with advanced searches and subscriptions
2017-05-28 10:59:52
threatpost
threatpost
Samba Patches Critical Bug Exploitable With One Line Of Code
2017-05-25 12:20:32
Cisco, Netgear Readying Patches for Samba Vulnerability
2017-05-31 13:51:56
Attackers Mining Cryptocurrency Using Exploits for Samba Vulnerability
2017-06-12 09:34:17
suse
suse
Security update for samba (important)
2017-05-24 21:12:15
Security update for samba (important)
2017-05-24 15:10:25
Security update for samba (important)
2017-05-24 15:09:57
rapid7community
rapid7community
Samba CVE-2017-7494: Scanning and Remediating in InsightVM and Nexpose
2017-05-25 21:22:37
Patching CVE-2017-7494 in Samba: It’s the Circle of Life
2017-05-27 02:51:04
zdt
zdt
Samba 3.5.0 - Remote code execution Exploit
2017-05-25 00:00:00
Samba is_known_pipename() Arbitrary Module Load Exploit
2017-05-30 00:00:00
oraclelinux
oraclelinux
samba4 security update
2017-05-24 00:00:00
samba3x security update
2017-05-26 00:00:00
samba security update
2017-05-24 00:00:00
canvas
canvas
Immunity Canvas: SAMBA_IS_KNOWN_PIPENAME
2017-05-30 18:29:00
debian
debian
[SECURITY] [DSA 3860-1] samba security update
2017-05-24 07:35:00
[SECURITY] [DSA 3860-1] samba security update
2017-05-24 07:35:00
[SECURITY] [DLA 951-1] samba security update
2017-05-24 08:11:20
checkpoint_advisories
checkpoint_advisories
Linux EternalRed Samba Remote Code Execution (CVE-2017-7494)
2017-05-25 00:00:00
veracode
veracode
Remote Code Execution (RCE)
2019-01-15 09:17:29
thn
thn
CowerSnail — Windows Backdoor from the Creators of SambaCry Linux Malware
2017-07-27 00:40:00
Warning! Hackers Started Using "SambaCry Flaw" to Hack Linux Systems
2017-06-10 01:16:00
7-Year-Old Samba Flaw Lets Hackers Access Thousands of Linux PCs Remotely
2017-05-24 20:23:00
ubuntucve
ubuntucve
CVE-2017-7494
2017-05-24 00:00:00
fedora
fedora
[SECURITY] Fedora 26 Update: samba-4.6.4-0.fc26
2017-06-03 17:39:59
[SECURITY] Fedora 25 Update: samba-4.5.10-0.fc25
2017-05-27 03:06:08
[SECURITY] Fedora 24 Update: samba-4.4.14-0.fc24
2017-05-27 02:53:53
myhack58
myhack58
archlinux
archlinux
[ASA-201705-22] samba: arbitrary code execution
2017-05-30 00:00:00
saint
saint
Samba shared library upload and execution
2017-06-08 00:00:00
Samba shared library upload and execution
2017-06-08 00:00:00
Samba shared library upload and execution
2017-06-08 00:00:00
debiancve
debiancve
CVE-2017-7494
2017-05-30 18:29:00
attackerkb
attackerkb
CVE-2017-7494
2017-05-30 00:00:00
osv
osv
samba - security update
2017-05-24 00:00:00
CVE-2017-7494
2017-05-30 18:29:00
samba - security update
2017-05-24 00:00:00
redhatcve
redhatcve
CVE-2017-7494
2021-03-13 22:06:40
ics
ics
Potential Legacy Risk from Malware Targeting QNAP NAS Devices
2020-08-06 12:00:00
nvd
nvd
CVE-2017-7494
2017-05-30 18:29:00
packetstorm
packetstorm
Samba is_known_pipename() Arbitrary Module Load
2017-05-27 00:00:00
Samba 3.5.0 Remote Code Execution
2017-05-25 00:00:00
Samba is_known_pipename() Code Execution
2017-06-02 00:00:00
slackware
slackware
[slackware-security] samba
2017-05-24 20:34:46
metasploit
metasploit
Samba is_known_pipename() Arbitrary Module Load
2017-05-25 00:42:04
seebug
seebug
Samba remote code execution vulnerability(CVE-2017-7494)
2017-05-25 00:00:00
ubuntu
ubuntu
Samba vulnerability
2017-05-24 00:00:00
Samba vulnerability
2017-05-24 00:00:00
securelist
securelist
SambaCry is coming
2017-06-09 22:07:16
centos
centos
samba4 security update
2017-05-25 13:07:15
ctdb, libsmbclient, libwbclient, samba security update
2017-05-25 13:08:37
samba
samba
Remote code execution from a writable share.
2017-05-24 00:00:00
cisa_kev
cisa_kev
Samba Remote Code Execution Vulnerability
2023-03-30 00:00:00
exploitpack
exploitpack
Samba 3.5.0 - Remote Code Execution
2017-05-24 00:00:00
f5
f5
K13551136 : Samba remote code execution vulnerability CVE-2017-7494
2017-05-25 00:00:00
huawei
huawei
alpinelinux
alpinelinux
CVE-2017-7494
2017-05-30 18:29:00
cvelist
cvelist
CVE-2017-7494
2017-05-30 18:00:00
qualysblog
qualysblog
Samba Vulnerability CVE-2017-7494
2017-05-26 20:32:57
talosblog
talosblog
Samba Vulnerability: Dancing Its Way to a Network Near You
2017-05-25 00:31:00
freebsd
freebsd
samba -- remote code execution vulnerability
2017-05-24 00:00:00
cve
cve
CVE-2017-7494
2017-05-30 18:29:00
exploitdb
exploitdb
Samba 3.5.0 < 4.4.14/4.5.10/4.6.4 - 'is_known_pipename()' Arbitrary Module Load (Metasploit)
2017-05-29 00:00:00
Samba 3.5.0 - Remote Code Execution
2017-05-24 00:00:00
nmap
nmap
oracle-brute NSE Script
2010-08-19 23:09:32
ip-geolocation-maxmind NSE Script
2011-06-20 01:42:21
mongodb-info NSE Script
2010-01-29 22:23:06
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.973
Percentile
99.9%
Related for REDHAT-RHSA-2017-1390.NASL