Secunia

Sun has issued a patch for Solaris 9. This fixes an older vulnerability in samba, which can be exploited by malicious people to compromise a vulnerable server.

The vulnerability is caused due to a boundary error in the length checking code for password change requests from clients. A malicious user can exploit this by sending a request containing a specially crafted, encrypted password to a vulnerable system, which causes a buffer overflow, when the encrypted password is decrypted.

Successful exploitation can cause a DoS (Denial of Service) and potentially allow execution of arbitrary code on the system.

Solution
Apply patch.
Further details available in Customer Area

Provided and/or discovered by
Steve Langasek

Original Advisory
http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F53580&zone_32=category%3Asecurity

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area