Alerts This Week
Warning Icon 1 619
Alerts This Week
Warning Icon 1 619

SUSE Linux 11-SP2: 2016:1028-1 Important DoS and MITM Security Update

suse
Calendar Grey April 13, 2016
Dist Suse Esm H88
SUSE has rolled out a significant security update that resolves critical vulnerabilities in samba. Ensure your system is protected by applying this essential patch!
An update that solves 7 vulnerabilities and has one errata An update that solves 7 vulnerabilities and has one errata An update that solves 7 vulnerabilities and has one errata is ...

Summary

samba was updated to fix seven security issues. These security issues were fixed: - CVE-2015-5370: DCERPC server and client were vulnerable to DOS and MITM attacks (bsc#936862). - CVE-2016-2110: A man-in-the-middle could have downgraded NTLMSSP authentication (bsc#973031). - CVE-2016-2111: Domain controller netlogon member computer could have been spoofed (bsc#973032). - CVE-2016-2112: LDAP conenctions were vulnerable to downgrade and MITM attack (bsc#973033). - CVE-2016-2113: TLS certificate validation were missing (bsc#973034). - CVE-2016-2115: Named pipe IPC were vulnerable to MITM attacks (bsc#973036). - CVE-2016-2118: "Badlock" DCERPC impersonation of authenticated account were possible (bsc#971965). These non-security issues were fixed:

Topics%20covered

Topics Covered

security advisory security update DoS samba important SUSE Linux MITM

References

#936862 #967017 #971965 #973031 #973032 #973033

#973034 #973036

Cross- CVE-2015-5370 CVE-2016-2110 CVE-2016-2111

CVE-2016-2112 CVE-2016-2113 CVE-2016-2115

CVE-2016-2118

Affected Products:

SUSE Linux Enterprise Server 11-SP2-LTSS

SUSE Linux Enterprise Debuginfo 11-SP2

https://www.suse.com/security/cve/CVE-2015-5370.html

https://www.suse.com/security/cve/CVE-2016-2110.html

https://www.suse.com/security/cve/CVE-2016-2111.html

https://www.suse.com/security/cve/CVE-2016-2112.html

https://www.suse.com/security/cve/CVE-2016-2113.html

https://www.suse.com/security/cve/CVE-2016-2115.html

https://www.suse.com/security/cve/CVE-2016-2118.html

https://bugzilla.suse.com/936862

https://bugzilla.suse.com/967017

https://bugzilla.suse.com/971965

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2016:1028-1
Rating: important

Topics%20covered

Topics Covered

security advisory security update DoS samba important SUSE Linux MITM

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here