English | Deutsch | Español | Português
 UserID:
 Passwd:
new user
 About:   Dedicated  | Advanced  | Standard  | Recurring  | No Risk  | Desktop  | Basic  | Single  | Security Seal  | FAQ
  Price/Feature Summary  | Order  | New Vulnerabilities  | Confidentiality  | Vulnerability Search
 Vulnerability   
Search   
    Search 143769 CVE descriptions
and 71225 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- --------------------------------------------------------------------------
Trustix Secure Linux Security Advisory #2004-0051

Package name:      samba
Summary:           access files outside of defined path
Date:              2004-10-01
Affected versions: Trustix Secure Linux 1.5
                   Trustix Secure Linux 2.0

- --------------------------------------------------------------------------
Package description:
  Samba provides an SMB server which can be used to provide network
  services to SMB (sometimes called "Lan Manager") clients, including
  various versions of MS Windows, OS/2, and other Linux machines. Samba
  uses NetBIOS over TCP/IP (NetBT) protocols and does NOT need NetBEUI
  (Microsoft Raw NetBIOS frame) protocol.Samba-2 features an almost
  working NT Domain Control capability and includes the new SWAT (Samba
  Web Administration Tool) that allows samba's smb.conf file to be
  remotely managed using your favourite web browser.

Problem description:
  A security vulnerability has been located in Samba 2.2.x <= 2.2.11 and
  Samba 3.0.x <= 3.0.5. A remote attacker may be able to gain access to
  files which exist outside of the share's defined path. Such files must
  still be readable by the account used for the connection.

  This has been assigned CAN-2004-0815 by the CVE.


Action:
  We recommend that all systems with this package installed be upgraded.
  Please note that if you do not need the functionality provided by this
  package, you may want to remove it from your system.


Location:
  All Trustix Secure Linux updates are available from
  <URI:http://http.trustix.org/pub/trustix/updates/>
  <URI:ftp://ftp.trustix.org/pub/trustix/updates/>


About Trustix Secure Linux:
  Trustix Secure Linux is a small Linux distribution for servers. With focus
  on security and stability, the system is painlessly kept safe and up to
  date from day one using swup, the automated software updater.


Automatic updates:
  Users of the SWUP tool can enjoy having updates automatically
  installed using 'swup --upgrade'.


Questions?
  Check out our mailing lists:
  <URI:http://www.trustix.org/support/>


Verification:
  This advisory along with all Trustix packages are signed with the
  TSL sign key.
  This key is available from:
  <URI:http://www.trustix.org/TSL-SIGN-KEY>

  The advisory itself is available from the errata pages at
  <URI:http://www.trustix.org/errata/trustix-1.5/> and
  <URI:http://www.trustix.org/errata/trustix-2.0/>
  or directly at
  <URI:http://www.trustix.org/errata/2004/0051/>


MD5sums of the packages:
- --------------------------------------------------------------------------
13f3de56fb37664f831b322993bf3473  1.5/rpms/samba-2.2.12-0.1tr.i586.rpm
c72650049e23b5526d0f440601417fbf  1.5/rpms/samba-client-2.2.12-0.1tr.i586.rpm
2604e07d00e6c04fb6b6c26af65be7ee  1.5/rpms/samba-common-2.2.12-0.1tr.i586.rpm

a976bf5e938cdea166c1d82091b170d9  2.0/rpms/samba-2.2.12-1tr.i586.rpm
d5d3043446147960d1469c31ba378521  2.0/rpms/samba-client-2.2.12-1tr.i586.rpm
fa67fe708998bc039ca25d18affac27b  2.0/rpms/samba-common-2.2.12-1tr.i586.rpm
- --------------------------------------------------------------------------


Trustix Security Team

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (GNU/Linux)

iD8DBQFBXWFpi8CEzsK9IksRAtC+AJ9QhMsAWxS6jFYQpykOYqkbscJ59ACgrAF1
By+a4b0WX2JM4o9YGdKNav0=
=XDga
-----END PGP SIGNATURE-----

New User Registration
Email:
UserID:
Passwd:
Please email me your monthly newsletters, informing the latest services, improvements & surveys.
Please email me a vulnerability test announcement whenever a new test is added.
   Privacy
Registered User Login
 
UserID:   
Passwd:  

 Forgot userid or passwd?
Email/Userid:




Home | About Us | Contact Us | Partner Programs | Developer APIs | Privacy | Mailing Lists | Abuse
Security Audits | Managed DNS | Network Monitoring | Site Analyzer | Internet Research Reports
Web Probe

© 1998-2019 E-Soft Inc. All rights reserved.