| Description: | Description:
The remote host is missing updates announced in
advisory TSLSA-2004-0066.
samba:
From the Samba security advisory:
Remote exploitation of an integer overflow vulnerability
in the smbd daemon included in Samba 2.0.x, Samba 2.2.x,
and Samba 3.0.x prior to and including 3.0.9 could
allow an attacker to cause controllable heap corruption,
leading to execution of arbitrary commands with root
privileges.
The vulnerability was discovered by Greg MacManus, iDEFENSE Labs.
The Common Vulnerabilities and Exposures project (cve.mitre.org) has
assigned the name CVE-2004-1154 to this issue.
php:
(Taken from the php.net announce:)
The PHP Development Team would like to announce the immediate release
of PHP 4.3.10 and PHP 5.0.3. These are maintenance releases that in
addition to non-critical bug fixes address several very serious
security issues. All Users of PHP are strongly encouraged to upgrade
to one of these releases as soon as possible.
The Common Vulnerabilities and Exposures project (cve.mitre.org) has
assigned the following names to these issues:
CVE-2004-1018
CVE-2004-1019
CVE-2004-1020
CVE-2004-1063
CVE-2004-1064
CVE-2004-1065
These issues were discovered during development of Hardened-PHP.
Solution:
Update your system with the packages as indicated in
the referenced security advisory.
http://www.securityspace.com/smysecure/catid.html?in=TSLSA-2004-0066
Risk factor : Critical
CVSS Score:
10.0
|
