Red Hat Security AdvisoryRHSA-2008:0288
samba security update
Released 2008-05-28 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 samba-3.0.9-1.3E.15, samba-3.0.9-1.3E.15.i386, samba-client-3.0.9-1.3E.15 +5
- Red Hat Enterprise Linux AS (Advanced Server) version 2.1 samba-2.2.12-1.21as.9.3, samba-2.2.12-1.21as.9.3.i386, samba-2.2.12-1.21as.9.3.ia64 +6
- Red Hat Enterprise Linux AS version 3 samba-3.0.9-1.3E.15, samba-3.0.9-1.3E.15.i386, samba-3.0.9-1.3E.15.ia64 +13
- Red Hat Enterprise Linux AS version 4 samba-3.0.25b-1.el4_6.5, samba-3.0.25b-1.el4_6.5.i386, samba-3.0.25b-1.el4_6.5.ia64 +13
- Red Hat Enterprise Linux Desktop version 4 samba-3.0.25b-1.el4_6.5, samba-3.0.25b-1.el4_6.5.i386, samba-client-3.0.25b-1.el4_6.5 +5
- Red Hat Enterprise Linux ES version 2.1 samba-2.2.12-1.21as.9.3, samba-2.2.12-1.21as.9.3.i386, samba-client-2.2.12-1.21as.9.3.i386 +2
- Red Hat Enterprise Linux ES version 3 samba-3.0.9-1.3E.15, samba-3.0.9-1.3E.15.i386, samba-3.0.9-1.3E.15.ia64 +9
- Red Hat Enterprise Linux ES version 4 samba-3.0.25b-1.el4_6.5, samba-3.0.25b-1.el4_6.5.i386, samba-3.0.25b-1.el4_6.5.ia64 +9
- Red Hat Enterprise Linux WS version 2.1 samba-2.2.12-1.21as.9.3, samba-2.2.12-1.21as.9.3.i386, samba-client-2.2.12-1.21as.9.3.i386 +2
- Red Hat Enterprise Linux WS version 3 samba-3.0.9-1.3E.15, samba-3.0.9-1.3E.15.i386, samba-3.0.9-1.3E.15.ia64 +9
- Red Hat Enterprise Linux WS version 4 samba-3.0.25b-1.el4_6.5, samba-3.0.25b-1.el4_6.5.i386, samba-3.0.25b-1.el4_6.5.ia64 +9
- Red Hat Linux Advanced Workstation 2.1 samba-2.2.12-1.21as.9.3, samba-2.2.12-1.21as.9.3.ia64, samba-client-2.2.12-1.21as.9.3.ia64 +2
Fixes 1 record
Priority HIGH 70
Heap-based buffer overflow in the receive_smb_raw function in util/sock.c in Samba 3.0.0 through 3.0.29 allows remote attackers to execute arbitrary code via a crafted SMB response.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.69085 · Published 2008-05-29 · Fixed CWE-119
