漏洞等级： 
漏洞信息
A flaw was found in the way Samba initiated signed DCE/RPC connections. A man-in-the-middle attacker could use this flaw to downgrade the connection to not use signing and therefore impersonate the server.
漏洞危害
Allows unauthorized disclosure of information; allows unauthorized modification; allows disruption of service.
解决方案
Please refer to Amazon advisory ALAS-2016-732 for affected packages and patching details, or update with your package manager.
Patch:
Following are links for downloading patches to fix the vulnerabilities:
ALAS-2016-732: Amazon Linux (samba (4.2.10-7.34.amzn1) on noarch)
ALAS-2016-732: Amazon Linux (samba (4.2.10-7.34.amzn1) on x86_64)
ALAS-2016-732: Amazon Linux (samba (4.2.10-7.34.amzn1) on src)
ALAS-2016-732: Amazon Linux (samba (4.2.10-7.34.amzn1) on i686)
0day
文章评论