Ubuntu: 2156-1 Critical: Samba Password Protection Risk

ubuntu

March 26, 2014

Samba did not properly enforce the password guessing protection mechanism.

Summary

Samba did not properly enforce the password guessing protection mechanism.

Software Description:

- samba: SMB/CIFS file, print, and login server for Unix

Details:

Andrew Bartlett discovered that Samba did not properly enforce the

password guessing protection mechanism for all interfaces. A remote

attacker could use this issue to possibly attempt to brute force user

passwords.

Topics Covered

security advisory security issue critical samba Ubuntu brute force password protection

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 13.10:
  samba                           2:3.6.18-1ubuntu3.2

Ubuntu 12.10:
  samba                           2:3.6.6-3ubuntu5.4

Ubuntu 12.04 LTS:
  samba                           2:3.6.3-2ubuntu2.10

Ubuntu 10.04 LTS:
  samba                           2:3.4.7~dfsg-1ubuntu3.14

In general, a standard system update will make all the necessary changes.