aru Posted April 7, 2003 Report Share Posted April 7, 2003 MandrakeSoft Security Advisory MDKSA-2003:044 : samba April 7th, 2003 Updated samba packages fix remote root vulnerability An exploitable buffer overflow was discovered in the Samba server that can lead to an anonymous remote root compromise. The Samba Team also discovered some potential overflows during an internal code audit which was done in response to the previously noted buffer overflow problem. All versions of Samba prior to 2.2.8a are vulnerable. The provided updates contain a patch from the Samba Team to correct the issue. An exploit is known to exist and all Mandrake Linux users are encouraged to upgrade immediately. The released versions of Mandrake GNU/Linux affected are: 8.2 [*] 8.2/PPC [*] 9.0 [*] 9.1 [*] 9.1/PPC [*] Multi Network Firewall 8.2 [*] Corporate Server 2.1 Full information about this advisory, including the updated packages, is available at: www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2003:044 Other references: http://cve.mitre.org/cgi-bin/cvename.cgi?n...e=CAN-2003-0196 http://cve.mitre.org/cgi-bin/cvename.cgi?n...e=CAN-2003-0201 Posted automatically by aru (mdksec2mub v0.0.5) Link to comment Share on other sites More sharing options...
Recommended Posts