Red Hat Security Advisory

RHSA-2007:1017

samba security update

Released 2007-11-15 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat Enterprise Linux (v. 5 server) samba-3.0.25b-1.el5_1.2, samba-3.0.25b-1.el5_1.2.i386, samba-3.0.25b-1.el5_1.2.ia64 +13
Red Hat Enterprise Linux Desktop (v. 5 client) samba-3.0.25b-1.el5_1.2, samba-3.0.25b-1.el5_1.2.i386, samba-client-3.0.25b-1.el5_1.2 +5

Fixes 3 records

TI-2007-05185 CVE-2007-5398 · GHSA-2488-7mjj-wx6f

Stack-based buffer overflow in the reply_netbios_packet function in nmbd/nmbd_packets.c…

MEDIUM 53

Stack-based buffer overflow in the reply_netbios_packet function in nmbd/nmbd_packets.c in nmbd in Samba 3.0.0 through 3.0.26a, when operating as a WINS server, allows remote attackers to execute arbitrary code via craft…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.11396 Published 2007-11-16 Fixed CWE-119

TI-2007-04426 CVE-2007-4572 · GHSA-c889-7vh4-j454

Stack-based buffer overflow in nmbd in Samba 3.0.0 through 3.0.26a, when configured as a…

MEDIUM 49

Stack-based buffer overflow in nmbd in Samba 3.0.0 through 3.0.26a, when configured as a Primary or Backup Domain controller, allows remote attackers to have an unknown impact via crafted GETDC mailslot requests, related…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.05888 Published 2007-11-16 Fixed CWE-119

TI-2007-04006 CVE-2007-4138 · GHSA-74rm-gxr2-j77h

The Winbind nss_info extension (nsswitch/idmap_ad.c) in idmap_ad.so in Samba 3.0.25…

LOW 32

The Winbind nss_info extension (nsswitch/idmap_ad.c) in idmap_ad.so in Samba 3.0.25 through 3.0.25c, when the "winbind nss info" option is set to rfc2307 or sfu, grants all local users the privileges of gid 0 when the (1…

CVSS 2.0MEDIUM 6.9 Local No auth Interaction — EPSS 0.00724 Published 2007-09-14 Fixed CWE-264