Russian Vulnerability Scanner Database

Back to List

BDU:2017-01262

Scores

EPSS

0.000None0.0%
0%20%40%60%80%100%

Percentile: 0.0%

CVSS

9.8Critical3.x
0246810

CVSS Score: 9.8/10

All CVSS Scores

CVSS 3.x
9.8

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS 2.0
9.3

Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Description

Уязвимость сетевой файловой системы Samba существует из-за недостаточной проверки входных данных. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код (находящийся в библиотеке, размещённой на общем сетевом ресурсе) при помощи специально сформированного сетевого запроса к Samba-серверу

Scaner-VS 7 — a modern vulnerability management solution

Uses this database for vulnerability detection. High-speed search, cross-platform, advanced configuration audit, and flexible filtering. Suitable for organizations of any size.
Learn more about Scaner-VS 7

Sources

bdu

Related Vulnerabilities

CVE-2017-7494

Reference Links

https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7494
http://ubuntu.com/usn/usn-3296-1
http://ubuntu.com/usn/usn-3296-2
http://www.debian.org/security/dsa-3860/
https://rhn.redhat.com/errata/RHSA-2017-1270.html
https://rhn.redhat.com/errata/RHSA-2017-1271.html
https://rhn.redhat.com/errata/RHSA-2017-1272.html
https://rhn.redhat.com/errata/RHSA-2017-1273.html
http://www.samba.org/samba/security/
https://github.com/omri9741/cve-2017-7494
https://access.redhat.com/security/cve/cve-2017-7494
https://www.ubuntu.com/usn/usn-3296-1/
https://www.ubuntu.com/usn/usn-3296-2/
https://www.debian.org/security/2017/dsa-3860.ru.html
https://www.exploit-db.com/exploits/42084
https://www.exploit-db.com/exploits/42060
https://www.cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv

Recommendations

Source: bdu

Использование рекомендаций:
Для Samba:
Обновление сетевой файловой системы Samba до версии 4.6.4, 4.5.10, 4.4.14 или более новых
При отсутствии возможности оперативного обновления необходимо установить запрет на запись файлов в общие сетевые ресурсы

Для Ubuntu:

https://www.ubuntu.com/usn/usn-3296-1/

https://www.ubuntu.com/usn/usn-3296-2/

Для Debian GNU/Linux:
https://www.debian.org/security/2017/dsa-3860.ru.html

Для программных продуктов Red Hat Inc.:
https://access.redhat.com/security/cve/cve-2017-7494

Для CNC11 TITANIUM mini:
Обновление сетевой файловой системы Samba до версии 4.3.11+dfsg-0ubuntu0.14.04.8

Для Astra Linux:
Обновление программного обеспечения (пакета samba) до 2:4.5.12+dfsg-2+deb9u1 или более поздней версии

URL: https://bdu.fstec.ru/vul/2017-01262

Vulnerable Software (40)

Type: Configuration

Vendor: samba team

Product: samba

Operating System: ubuntu 17.04

Trait: 
{
  "version_end_excluding": "4.4.14",
  "version_start_including": "3.5.0"
}

Source: bdu

Type: Configuration

Vendor: samba team

Product: samba

Operating System: ubuntu 16.10

Trait: 
{
  "version_end_excluding": "4.5.10",
  "version_start_including": "3.5.0"
}

Source: bdu

Type: Configuration

Vendor: samba team

Product: samba

Operating System: ubuntu 12.04 LTS

Trait: 
{
  "version_end_excluding": "4.6.4",
  "version_start_including": "3.5.0"
}

Source: bdu

Type: Configuration

Vendor: samba team

Product: samba

Operating System: ubuntu 17.04

Trait: 
{
  "version_end_excluding": "4.5.10",
  "version_start_including": "3.5.0"
}

Source: bdu

Type: Configuration

Vendor: samba team

Product: samba

Operating System: ubuntu 17.04

Trait: 
{
  "version_end_excluding": "4.6.4",
  "version_start_including": "3.5.0"
}

Source: bdu

Type: Configuration

Vendor: samba team

Product: samba

Operating System: debian gnu/linux *

Trait: 
{
  "version_end_excluding": "4.4.14",
  "version_start_including": "3.5.0"
}

Source: bdu

Type: Configuration

Vendor: samba team

Product: samba

Operating System: debian gnu/linux *

Trait: 
{
  "version_end_excluding": "4.5.10",
  "version_start_including": "3.5.0"
}

Source: bdu

Type: Configuration

Vendor: samba team

Product: samba

Operating System: debian gnu/linux *

Trait: 
{
  "version_end_excluding": "4.6.4",
  "version_start_including": "3.5.0"
}

Source: bdu

Type: Configuration

Vendor: samba team

Product: samba

Operating System: astra 2.12

Trait: 
{
  "version_end_excluding": "4.5.10",
  "version_start_including": "3.5.0"
}

Source: bdu

Type: Configuration

Vendor: samba team

Product: samba

Operating System: ubuntu 12.04 LTS

Trait: 
{
  "version_end_excluding": "4.5.10",
  "version_start_including": "3.5.0"
}

Source: bdu