Vulnerability Scanning Solutions, LLC.
Our Process
What We Scan For
Sample Report
Client List
Contact Us
What We Scan For
Family: Ubuntu Local Security Checks --> Category: infos

USN41-1 : samba vulnerability Vulnerability Scan

Vulnerability Scan Summary
samba vulnerability

Detailed Explanation for this Vulnerability Test

Synopsis :

These remote packages are missing security patches :
- libpam-smbpass
- libsmbclient
- libsmbclient-dev
- python2.3-samba
- samba
- samba-common
- samba-doc
- smbclient
- smbfs
- swat
- winbind

Description :

Greg MacManus discovered an integer overflow in Samba's smbd daemon.
Requesting a very large number of access control descriptors from the
server caused an integer overflow, which resulted in a memory
allocation being too short, thus causing a buffer overflow. By sending
carefully crafted data, a possible hacker could exploit this to execute
arbitrary code on the server with full root permissions.

Solution :

Upgrade to :
- libpam-smbpass-3.0.7-1ubuntu6.3 (Ubuntu 4.10)
- libsmbclient-3.0.7-1ubuntu6.3 (Ubuntu 4.10)
- libsmbclient-dev-3.0.7-1ubuntu6.3 (Ubuntu 4.10)
- python2.3-samba-3.0.7-1ubuntu6.3 (Ubuntu 4.10)
- samba-3.0.7-1ubuntu6.3 (Ubuntu 4.10)
- samba-common-3.0.7-1ubuntu6.3 (Ubuntu 4.10)
- samba-doc-3.0.7-1ubuntu6.3 (Ubuntu 4.10)
- smbclient-3.0.7-1ubuntu6.3 (Ubuntu 4.10)
- smbfs-3.0.7-1ubuntu6.3 (Ubuntu 4.10)
- swat-3.0.7-1ubuntu6.3 (Ubuntu 4.10)
- winbind-3.0.7-1ubuntu6.3 (Ubuntu 4.10)

Threat Level: High

Click HERE for more information and discussions on this network vulnerability scan.


P.O. Box 827051

Pembroke Pines, FL 33082-7051

Vulnerability Scanning Solutions, LLC.