[월:] 2018년 03월

USN-3595-1: Samba vulnerabilities samba vulnerabilities A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 17.10 Ubuntu 16.04 LTS Ubuntu 14.04 LTS Summary Several security issues were fixed in Samba. Software Description samba – SMB/CIFS file, print, and login server for Unix Details Björn Baumbach discovered that Samba incorrectly validated permissions when changing account passwords via LDAP. An authenticated attacker could use this issue to change the password of other users, including administrators, and perform actions as those users. (CVE-2018-1057) It was discovered that Samba incorrectly validated inputs to the RPC spoolss service. An authenticated attacker could use this issue to cause the service to crash, resulting in a denial of service. (CVE-2018-1050) Update instructions The problem can be corrected by updating your system to the following package versions: Ubuntu 17.10 samba – 2:4.6.7+dfsg-1ubuntu3.2 samba-dsdb-modules – 2:4.6.7+dfsg-1ubuntu3.2 Ubuntu [ more… ]