vulnerability
HP-UX: CVE-2015-5370: HPE HP-UX running CIFS Server (Samba), Remote Denial of Service (DoS), Disclosure of Information, Unauthorized Access
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 4 | (AV:N/AC:M/Au:N/C:N/I:P/A:N) | Apr 24, 2016 | Aug 11, 2017 | Oct 30, 2017 |
Severity
4
CVSS
(AV:N/AC:M/Au:N/C:N/I:P/A:N)
Published
Apr 24, 2016
Added
Aug 11, 2017
Modified
Oct 30, 2017
Description
Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not properly implement the DCE-RPC layer, which allows remote attackers to perform protocol-downgrade attacks, cause a denial of service (application crash or CPU consumption), or possibly execute arbitrary code on a client system via unspecified vectors.
Solutions
hpux-update-cifs-development-cifs-prghpux-update-cifs-server-cifs-adminhpux-update-cifs-server-cifs-dochpux-update-cifs-server-cifs-libhpux-update-cifs-server-cifs-runhpux-update-cifs-server-cifs-util
Rapid7 Labs
2026 Global Threat Landscape Report
The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.