Red Hat Security AdvisoryRHSA-2007:0354
samba security update
Released 2007-05-14 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 samba-3.0.9-1.3E.13.2, samba-3.0.9-1.3E.13.2.i386, samba-client-3.0.9-1.3E.13.2 +5
- Red Hat Enterprise Linux (v. 5 server) samba-3.0.23c-2.el5.2.0.2, samba-3.0.23c-2.el5.2.0.2.i386, samba-3.0.23c-2.el5.2.0.2.ia64 +13
- Red Hat Enterprise Linux AS (Advanced Server) version 2.1 samba-2.2.12-1.21as.6, samba-2.2.12-1.21as.6.i386, samba-2.2.12-1.21as.6.ia64 +6
- Red Hat Enterprise Linux AS version 3 samba-3.0.9-1.3E.13.2, samba-3.0.9-1.3E.13.2.i386, samba-3.0.9-1.3E.13.2.ia64 +13
- Red Hat Enterprise Linux AS version 4 samba-3.0.10-1.4E.12.2, samba-3.0.10-1.4E.12.2.i386, samba-3.0.10-1.4E.12.2.ia64 +13
- Red Hat Enterprise Linux Desktop (v. 5 client) samba-3.0.23c-2.el5.2.0.2, samba-3.0.23c-2.el5.2.0.2.i386, samba-client-3.0.23c-2.el5.2.0.2 +5
- Red Hat Enterprise Linux Desktop version 4 samba-3.0.10-1.4E.12.2, samba-3.0.10-1.4E.12.2.i386, samba-client-3.0.10-1.4E.12.2 +5
- Red Hat Enterprise Linux ES version 2.1 samba-2.2.12-1.21as.6, samba-2.2.12-1.21as.6.i386, samba-client-2.2.12-1.21as.6.i386 +2
- Red Hat Enterprise Linux ES version 3 samba-3.0.9-1.3E.13.2, samba-3.0.9-1.3E.13.2.i386, samba-3.0.9-1.3E.13.2.ia64 +9
- Red Hat Enterprise Linux ES version 4 samba-3.0.10-1.4E.12.2, samba-3.0.10-1.4E.12.2.i386, samba-3.0.10-1.4E.12.2.ia64 +9
- Red Hat Enterprise Linux WS version 2.1 samba-2.2.12-1.21as.6, samba-2.2.12-1.21as.6.i386, samba-client-2.2.12-1.21as.6.i386 +2
- Red Hat Enterprise Linux WS version 3 samba-3.0.9-1.3E.13.2, samba-3.0.9-1.3E.13.2.i386, samba-3.0.9-1.3E.13.2.ia64 +9
- Red Hat Enterprise Linux WS version 4 samba-3.0.10-1.4E.12.2, samba-3.0.10-1.4E.12.2.i386, samba-3.0.10-1.4E.12.2.ia64 +9
- Red Hat Linux Advanced Workstation 2.1 samba-2.2.12-1.21as.6, samba-2.2.12-1.21as.6.ia64, samba-client-2.2.12-1.21as.6.ia64 +2
Fixes 2 records
Priority HIGH 82
Multiple heap-based buffer overflows in the NDR parsing in smbd in Samba 3.0.0 through 3.0.25rc3 allow remote attackers to execute arbitrary code via crafted MS-RPC requests involving (1) DFSEnum (netdfs_io_dfs_EnumInfo_…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.77656 · Published 2007-05-14 · Fixed CWE-119
Priority MEDIUM 58
The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands via shell metacharacters involving the (1) SamrChangePassword function, when the "username map scrip…
CVSS 2.0MEDIUM 6.0· Network · Low privileges · Interaction — · EPSS 0.49759 · Published 2007-05-14 · Fixed
