Red Hat Security AdvisoryRHSA-2008:0290
samba security and bug fix update
Released 2008-05-28 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) samba-3.0.28-1.el5_2.1, samba-3.0.28-1.el5_2.1.i386, samba-3.0.28-1.el5_2.1.ia64 +13
- Red Hat Enterprise Linux Desktop (v. 5 client) samba-3.0.28-1.el5_2.1, samba-3.0.28-1.el5_2.1.i386, samba-client-3.0.28-1.el5_2.1 +5
Fixes 1 record
Priority HIGH 70
Heap-based buffer overflow in the receive_smb_raw function in util/sock.c in Samba 3.0.0 through 3.0.29 allows remote attackers to execute arbitrary code via a crafted SMB response.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.69085 · Published 2008-05-29 · Fixed CWE-119