Red Hat Security AdvisoryRHSA-2007:1016
samba security update
Released 2007-11-15 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AS version 4 samba-3.0.25b-1.el4_6.2, samba-3.0.25b-1.el4_6.2.i386, samba-3.0.25b-1.el4_6.2.ia64 +13
- Red Hat Enterprise Linux Desktop version 4 samba-3.0.25b-1.el4_6.2, samba-3.0.25b-1.el4_6.2.i386, samba-client-3.0.25b-1.el4_6.2 +5
- Red Hat Enterprise Linux ES version 4 samba-3.0.25b-1.el4_6.2, samba-3.0.25b-1.el4_6.2.i386, samba-3.0.25b-1.el4_6.2.ia64 +9
- Red Hat Enterprise Linux WS version 4 samba-3.0.25b-1.el4_6.2, samba-3.0.25b-1.el4_6.2.i386, samba-3.0.25b-1.el4_6.2.ia64 +9
Fixes 3 records
Priority MEDIUM 53
Stack-based buffer overflow in the reply_netbios_packet function in nmbd/nmbd_packets.c in nmbd in Samba 3.0.0 through 3.0.26a, when operating as a WINS server, allows remote attackers to execute arbitrary code via craft…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.11396 · Published 2007-11-16 · Fixed CWE-119
Priority MEDIUM 49
Stack-based buffer overflow in nmbd in Samba 3.0.0 through 3.0.26a, when configured as a Primary or Backup Domain controller, allows remote attackers to have an unknown impact via crafted GETDC mailslot requests, related…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.05888 · Published 2007-11-16 · Fixed CWE-119
Priority LOW 32
The Winbind nss_info extension (nsswitch/idmap_ad.c) in idmap_ad.so in Samba 3.0.25 through 3.0.25c, when the "winbind nss info" option is set to rfc2307 or sfu, grants all local users the privileges of gid 0 when the (1…
CVSS 2.0MEDIUM 6.9· Local · No auth · Interaction — · EPSS 0.00724 · Published 2007-09-14 · Fixed CWE-264
THREATIST.IORead the docs