Test ID:	1.3.6.1.4.1.25623.1.0.100803
Category:	Buffer overflow
Title:	Samba SID Parsing Remote Buffer Overflow Vulnerability
Summary:	Samba is prone to a remote stack-based buffer-overflow vulnerability; because it fails to properly bounds-check user-supplied data before; copying it to an insufficiently sized memory buffer.
Description:	Summary: Samba is prone to a remote stack-based buffer-overflow vulnerability because it fails to properly bounds-check user-supplied data before copying it to an insufficiently sized memory buffer. Vulnerability Impact: An attacker can exploit this issue to execute arbitrary code in the context of the affected application. Failed exploit attempts will likely result in a denial of service. Affected Software/OS: Samba versions prior to 3.5.5 are vulnerable. Solution: Updates are available. Please see the references for more information. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	BugTraq ID: 43212 Common Vulnerability Exposure (CVE) ID: CVE-2010-3069 http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html http://www.securityfocus.com/bid/43212 Bugtraq: 20101207 VMSA-2010-0019 VMware ESX third party updates for Service Console (Google Search) http://www.securityfocus.com/archive/1/515055/100/0/threaded http://lists.fedoraproject.org/pipermail/package-announce/2010-September/047650.html http://lists.fedoraproject.org/pipermail/package-announce/2010-September/047697.html http://lists.fedoraproject.org/pipermail/package-announce/2010-September/047758.html HPdes Security Advisory: HPSBUX02657 http://marc.info/?l=bugtraq&m=130835366526620&w=2 HPdes Security Advisory: SSRT100460 http://www.redhat.com/support/errata/RHSA-2010-0860.html http://www.securitytracker.com/id?1024434 http://secunia.com/advisories/41354 http://secunia.com/advisories/41447 http://secunia.com/advisories/42531 http://secunia.com/advisories/42885 SuSE Security Announcement: SUSE-SR:2010:018 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html SuSE Security Announcement: SUSE-SR:2010:019 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html http://www.ubuntu.com/usn/USN-987-1 http://www.vupen.com/english/advisories/2010/2378 http://www.vupen.com/english/advisories/2010/3126 http://www.vupen.com/english/advisories/2011/0091 XForce ISS Database: samba-sidparse-bo(61773) https://exchange.xforce.ibmcloud.com/vulnerabilities/61773
Copyright	This script is Copyright (C) 2010 Greenbone Networks GmbH

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.