Rapid7 Vulnerability & Exploit Database

Huawei EulerOS: CVE-2016-2124: samba security update

Free InsightVM Trial No credit card necessary

Watch Demo See how it all works

Back to Search

Huawei EulerOS: CVE-2016-2124: samba security update

Severity

CVSS

(AV:N/AC:M/Au:N/C:P/I:N/A:N)

Published

02/18/2022

Created

03/01/2022

Added

02/28/2022

Modified

02/28/2022

Description

A flaw was found in the way samba implemented SMB1 authentication. An attacker could use this flaw to retrieve the plaintext password sent over the wire even if Kerberos authentication was required.

Solution(s)

huawei-euleros-2_0_sp10-upgrade-libsmbclient
huawei-euleros-2_0_sp10-upgrade-libwbclient
huawei-euleros-2_0_sp10-upgrade-samba
huawei-euleros-2_0_sp10-upgrade-samba-client
huawei-euleros-2_0_sp10-upgrade-samba-common
huawei-euleros-2_0_sp10-upgrade-samba-common-tools
huawei-euleros-2_0_sp10-upgrade-samba-libs
huawei-euleros-2_0_sp10-upgrade-samba-winbind
huawei-euleros-2_0_sp10-upgrade-samba-winbind-clients
huawei-euleros-2_0_sp10-upgrade-samba-winbind-modules

References

https://attackerkb.com/topics/cve-2016-2124
CVE - 2016-2124
EulerOS-SA-2022-1258

Advanced vulnerability management analytics and reporting.

Key Features

Free InsightVM Trial View All Features

With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.

– Scott Cheney, Manager of Information Security, Sierra View Medical Center

;