CVE:CVE-2017-12150
CNNVD:CNNVD-201709-1048
Samba是Samba团队开发的一套可使UNIX系列的操作系统与微软Windows操作系统的SMB/CIFS网络协议做连结的自由软件。该软件支持共享打印机、互相传输资料文件等。
Samba中存在安全绕过漏洞，该漏洞源于程序没有执行SMB签名。远程攻击者可利用该漏洞实施中间人攻击，检索明文形式的信息。以下版本受到影响：Samba 4.1.0版本至4.4.15版本，4.5.14之前的4.5.x版本，4.6.8之前的4.6.x版本。
solution:Upgrade samba samba to a higher version than 4.4.16,4.5.14,4.6.8,and avoid the version [3.0.25,4.4.16),[4.5.0,4.5.14),[4.6.0,4.6.8); Upgrade redhat enterprise_linux_desktop to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_server to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_workstation to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat gluster_storage to a higher version than 3.0,and avoid the version 3.0; Upgrade debian debian_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0