Samba: Data disclosure

2009-03-07T00:00:00
ID GLSA-200903-07
Type gentoo
Reporter Gentoo Foundation
Modified 2009-03-07T00:00:00

Description

Background

Samba is a suite of SMB and CIFS client/server programs.

Description

Samba does not properly check memory boundaries when handling trans, rans2, and nttrans requests.

Impact

A remote attacker could send specially crafted requests to a Samba daemon, leading to the disclosure of arbitrary memory or to a Denial of Service.

Workaround

There is no known workaround at this time.

Resolution

All Samba users should upgrade to the latest version:

 # emerge --sync
 # emerge --ask --oneshot --verbose ">=net-fs/samba-3.0.33"