FreshPorts - VuXML

This page displays vulnerability information about FreeBSD Ports.

The last vuln.xml file processed by FreshPorts is:

Revision:  366223
Date:      2014-08-26
Time:      16:36:41Z
Committer: rene

List all Vulnerabilities, by package

List all Vulnerabilities, by date

These are the vulnerabilities relating to the commit you have selected:

VuXML IDDescription
0fa15e08-92ec-11e1-a94a-00215c6a37bbsamba -- incorrect permission checks vulnerability

The Samba project reports:

Samba versions 3.4.x to 3.6.4 inclusive are affected by a vulnerability that allows arbitrary users to modify privileges on a file server.

Security checks were incorrectly applied to the Local Security Authority (LSA) remote proceedure calls (RPC) CreateAccount, OpenAccount, AddAccountRights and RemoveAccountRights allowing any authenticated user to modify the privileges database.

This is a serious error, as it means that authenticated users can connect to the LSA and grant themselves the "take ownership" privilege. This privilege is used by the smbd file server to grant the ability to change ownership of a file or directory which means users could take ownership of files or directories they do not own.


Discovery 2012-04-30
Entry 2012-04-30
samba34
gt 3.4.* lt 3.4.17

samba35
gt 3.5.* lt 3.5.15

samba36
gt 3.6.* lt 3.6.5

CVE-2012-2111
e21c7c7a-0116-11e3-9e83-3c970e169bc2samba -- denial of service vulnerability

The Samba project reports:

All current released versions of Samba are vulnerable to a denial of service on an authenticated or guest connection. A malformed packet can cause the smbd server to loop the CPU performing memory allocations and preventing any further service.

A connection to a file share, or a local account is needed to exploit this problem, either authenticated or unauthenticated if guest connections are allowed.


Discovery 2013-08-05
Entry 2013-08-09
Modified 2013-08-09
samba34
gt 0

samba35
gt 0

samba36
gt 3.6.* lt 3.6.17

samba4
gt 4.0.* lt 4.0.8

CVE-2013-4124
http://www.samba.org/samba/security/CVE-2013-4124
0fa15e08-92ec-11e1-a94a-00215c6a37bbsamba -- incorrect permission checks vulnerability

The Samba project reports:

Samba versions 3.4.x to 3.6.4 inclusive are affected by a vulnerability that allows arbitrary users to modify privileges on a file server.

Security checks were incorrectly applied to the Local Security Authority (LSA) remote proceedure calls (RPC) CreateAccount, OpenAccount, AddAccountRights and RemoveAccountRights allowing any authenticated user to modify the privileges database.

This is a serious error, as it means that authenticated users can connect to the LSA and grant themselves the "take ownership" privilege. This privilege is used by the smbd file server to grant the ability to change ownership of a file or directory which means users could take ownership of files or directories they do not own.


Discovery 2012-04-30
Entry 2012-04-30
samba34
gt 3.4.* lt 3.4.17

samba35
gt 3.5.* lt 3.5.15

samba36
gt 3.6.* lt 3.6.5

CVE-2012-2111