|
Sun Solaris Multiple Samba Vulnerabilities
|
|
Secunia Advisory:
|
SA25675
|
|
|
Release Date:
|
2007-06-15
|
|
Last Update:
|
2007-10-16
|
|
Popularity:
|
6,983 views
|
|
|
Critical:
|
Moderately critical
|
|
Impact:
|
Privilege escalation
DoS
System access
|
|
Where:
|
From local network
|
|
Solution Status:
|
Partial Fix
|
|
| OS: | Sun Solaris 10
Sun Solaris 9
|
|
|
Subscribe:
|
Instant alerts on relevant vulnerabilities 
|
|
| CVE reference: | CVE-2007-0452
CVE-2007-2444
CVE-2007-2446
CVE-2007-2447
|
|
Description:
Sun has acknowledged some vulnerabilities in Sun Solaris, which can be exploited by malicious users to cause a DoS (Denial of Service), perform certain actions with escalated privileges and compromise a vulnerable system, and by malicious people to compromise a vulnerable system.
For more information, see:
SA24046
SA25232
The vulnerabilities are reported in Solaris 9 and 10 for both the x86 and SPARC platforms running Samba 3.0.0 through 3.0.25rc3, Samba 3.0.23d through 3.0.25pre2, and Samba 3.0.6 through 3.0.23d.
Solution:
-- SPARC Platform --
Solaris 10:
Apply patch 119757-05 or later.
-- x86 Platform --
Solaris 10:
Apply patch 119758-05 or later.
Solaris 9:
A final resolution is pending completion.
The vendor recommends turning off the samba service until a solution is available.
Changelog:
2007-10-01: Added vulnerability described in SA24046. Updated the "Description" section.
2007-10-16: Updated "Solution" with information about a patch for Solaris 10.
Original Advisory:
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102964-1
Other References:
SA24046:
http://secunia.com/advisories/24046/
SA25232:
http://secunia.com/advisories/25232/
|
|
|
Track this Secunia Advisory
|
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.
Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.
|
|
|
About this Secunia Advisory
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
