Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 538
Alerts This Week
Warning Icon 1 538

Ubuntu 12.04 ESM USN-3296-2 Critical: Samba Remote Code Execution

ubuntu
Calendar Grey May 24, 2017
Dist Ubuntu Esm H88
An issue with Samba in Ubuntu 12.04 ESM poses a risk for remote code execution. Ensure your system is updated to safeguard against this threat.
Samba could be made to run programs as an administrator.

Summary

Samba could be made to run programs as an administrator.

Software Description:

- samba: SMB/CIFS file, print, and login server for Unix

Details:

USN-3296-1 fixed a vulnerability in Samba. This update provides the

corresponding update for Ubuntu 12.04 ESM.

Original advisory details:

It was discovered that Samba incorrectly handled shared libraries. A remote

attacker could use this flaw to upload a shared library to a writable share

and execute arbitrary code.

Topics%20covered

Topics Covered

security advisory security issue critical remote code execution samba system update ubuntu

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 12.04 ESM:
  samba                           2:3.6.25-0ubuntu0.12.04.11

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-3296-2

https://ubuntu.com/security/notices/USN-3296-1

CVE-2017-7494

Severity
critical
Lowest
Low
Medium
High
Critical

May 24, 2017

Topics%20covered

Topics Covered

security advisory security issue critical remote code execution samba system update ubuntu

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.