|
Samba Security Bypass and Format String Vulnerabilities
|
|
Secunia Advisory:
|
SA35539
|
|
|
Release Date:
|
2009-06-24
|
|
Popularity:
|
2,614 views
|
|
|
Critical:
|
Less critical
|
|
Impact:
|
Security Bypass
System access
|
|
Where:
|
From local network
|
|
Solution Status:
|
Vendor Patch
|
|
| Software: | Samba 3.x
|
|
|
Secunia CVSS-2 Score:
|
Available in Secunia business solutions 
|
|
|
Subscribe:
|
Instant alerts on relevant vulnerabilities
|
|
| Advisory Content (Page 1 of 3) | [ 1 ] [ 2 ] [ 3 ] | |
|
Description:
Two vulnerabilities have been reported in Samba, which can be exploited by malicious users to bypass certain security restrictions and by malicious people to potentially compromise a user's system.
1) An uninitialised memory access error exists in smbd when denying attempts to modify a restricted access control list (ACL). This can be exploited to potentially modify the ACL of an already writable file without required permissions.
Successful exploitation requires that "dos filemode" is set to "yes" in smb.conf.
The vulnerability is reported in versions 3.0.31 through 3.3.5.
2) A format string error exists in the "smbclient" utility when processing file names received as command arguments. This can be exploited to potentially execute arbitrary code by tricking a user into e.g. issuing a "put" command having a malicious file name argument in "smbclient".
The vulnerability is reported in versions 3.2.0 through 3.2.12.
Change Page:
[ 1 ] [ 2 ] [ 3 ]
|
|
|
Track this Secunia Advisory
|
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.
Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.
|
|
|
About this Secunia Advisory
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
