Synopsis :

The remote Red Hat host is missing one or more security updates.

Description :

Updated samba packages that fix a buffer overflow issue are now
available.

Samba provides file and printer sharing services to SMB/CIFS clients.

The Samba team discovered a buffer overflow in the code used to
support the 'mangling method = hash' smb.conf option. The Common
Vulnerabilities and Exposures project (cve.mitre.org) has assigned the
name CVE-2004-0686 to this issue.

All users of Samba should upgrade to these updated packages, which
contain an upgrade to Samba-2.2.10, which is not vulnerable to this
issue.

See also :

https://www.redhat.com/security/data/cve/CVE-2004-0686.html
http://rhn.redhat.com/errata/RHSA-2004-404.html

Solution :

Update the affected packages.

Risk factor :

Medium / CVSS Base Score : 5.0
(CVSS2#AV:N/AC:L/Au:N/C:N/I:P/A:N)