RHEL 2.1 / 3 : samba (RHSA-2004:632)

This script is Copyright (C) 2004-2014 Tenable Network Security, Inc.


Synopsis :

The remote Red Hat host is missing one or more security updates.

Description :

Updated samba packages that fix various security vulnerabilities are
now available.

Samba provides file and printer sharing services to SMB/CIFS clients.

During a code audit, Stefan Esser discovered a buffer overflow in
Samba versions prior to 3.0.8 when handling unicode filenames. An
authenticated remote user could exploit this bug which may lead to
arbitrary code execution on the server. The Common Vulnerabilities and
Exposures project (cve.mitre.org) has assigned the name CVE-2004-0882
to this issue. Red Hat believes that the Exec-Shield technology
(enabled by default since Update 3) will block attempts to remotely
exploit this vulnerability on x86 architectures.

Additionally, a bug was found in the input validation routines in
versions of Samba prior to 3.0.8 that caused the smbd process to
consume abnormal amounts of system memory. An authenticated remote
user could exploit this bug to cause a denial of service. The Common
Vulnerabilities and Exposures project (cve.mitre.org) has assigned the
name CVE-2004-0930 to this issue.

Users of Samba should upgrade to these updated packages, which contain
backported security patches, and are not vulnerable to these issues.

See also :

https://www.redhat.com/security/data/cve/CVE-2004-0882.html
https://www.redhat.com/security/data/cve/CVE-2004-0930.html
http://www.samba.org/samba/history/samba-3.0.9.html
http://www.redhat.com/f/pdf/rhel/WHP0006US_Execshield.pdf
http://rhn.redhat.com/errata/RHSA-2004-632.html

Solution :

Update the affected packages.

Risk factor :

Critical / CVSS Base Score : 10.0
(CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)

Family: Red Hat Local Security Checks

Nessus Plugin ID: 15741 ()

Bugtraq ID:

CVE ID: CVE-2004-0882
CVE-2004-0930