Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 524
Alerts This Week
Warning Icon 1 524

SUSE: 2014:0497-1 Significant Update: Samba Brute Force Mitigation

suse
Calendar Grey April 8, 2014
Scroller Suse
Ubuntu Security Announcement: Critical OpenSSL update addresses vulnerabilities and strengthens cryptographic features.
An update that solves one vulnerability and has 6 fixes is An update that solves one vulnerability and has 6 fixes is An update that solves one vulnerability and has 6 fixes is now...

Summary

The Samba fileserver suite was updated to fix bugs and security issues. The following security issue have been fixed: * No Password lockout or ratelimiting was enforced for SAMR password changes, making brute force guessing attacks possible. CVE-2013-4496. Also the following feature has been added: * Allow smbcacls to take a '--propagate-inheritance' flag to indicate that the add, delete, modify and set operations now support automatic propagation of inheritable ACE(s); (FATE#316474). And the following bugs have been fixed: * Fixed problem with server taking too long to respond to a MSG_PRINTER_DRVUPGRADE message; (bso#9942); (bnc#863748). * Fixed memory leak in printer_list_get_printer(); (bso#9993); (bnc#865561). * Fixed Winbind 100% CPU utilization caused by domain

Topics%20covered

Topics Covered

security advisory security issue software update SUSE Samba brute force password protection

References

#726937 #786677 #844307 #847009 #849224 #863748

#865561

Cross- CVE-2013-4496

Affected Products:

SUSE Linux Enterprise Software Development Kit 11 SP3

SUSE Linux Enterprise Server 11 SP3 for VMware

SUSE Linux Enterprise Server 11 SP3

SUSE Linux Enterprise Desktop 11 SP3

https://www.suse.com/security/cve/CVE-2013-4496.html

https://scc.suse.com:443/patches/

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2014:0497-1
Rating: important

Topics%20covered

Topics Covered

security advisory security issue software update SUSE Samba brute force password protection

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.