| Description: | Description:
The remote host is missing updates announced in
advisory FLSA-2005:152874.
During a code audit, Stefan Esser discovered a buffer overflow in Samba
versions prior to 3.0.8 when handling unicode filenames. An
authenticated remote user could exploit this bug which may lead to
arbitrary code execution on the server. The Common Vulnerabilities and
Exposures project (cve.mitre.org) has assigned the name CVE-2004-0882 to
this issue.
A bug was found in the input validation routines in versions of Samba
prior to 3.0.8 that caused the smbd process to consume abnormal amounts
of system memory. An authenticated remote user could exploit this bug to
cause a denial of service. The Common Vulnerabilities and Exposures
project (cve.mitre.org) has assigned the name CVE-2004-0930 to this
issue.
Greg MacManus of iDEFENSE Labs has discovered an integer overflow bug in
Samba versions prior to 3.0.10. An authenticated remote user could
exploit this bug which may lead to arbitrary code execution on the Samba
server. The Common Vulnerabilities and Exposures project (cve.mitre.org)
has assigned the name CVE-2004-1154 to this issue.
Users of Samba should upgrade to these updated packages, which contain
backported security patches, and are not vulnerable to these issues.
Affected platforms:
Redhat 7.3
Redhat 9
Fedora Core 1
Solution:
http://www.securityspace.com/smysecure/catid.html?in=FLSA-2005:152874
Risk factor : Critical
CVSS Score:
10.0
|
