(RHSA-2007:1034) Critical: samba security update

2007-11-1500:00:00

access.redhat.com

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.964 High

EPSS

Percentile

99.4%

JSON

Samba is a suite of programs used by machines to share files, printers, and
other information.

A buffer overflow flaw was found in the way Samba creates NetBIOS replies.
If a Samba server is configured to run as a WINS server, a remote
unauthenticated user could cause the Samba server to crash, or execute
arbitrary code. (CVE-2007-5398)

Red Hat would like to thank Alin Rad Pop of Secunia Research for
responsibly disclosing this issue.

Users of Samba should upgrade to these updated packages, which contain a
backported patch to correct this issue.

OSVersionArchitecturePackageVersionFilename
RedHat4i386samba< 3.0.10-2.el4_5.1samba-3.0.10-2.el4_5.1.i386.rpm
RedHat4s390samba-client< 3.0.10-2.el4_5.1samba-client-3.0.10-2.el4_5.1.s390.rpm
RedHat4ia64samba-swat< 3.0.10-2.el4_5.1samba-swat-3.0.10-2.el4_5.1.ia64.rpm
RedHat4x86_64samba-client< 3.0.10-2.el4_5.1samba-client-3.0.10-2.el4_5.1.x86_64.rpm
RedHat4ppcsamba< 3.0.10-2.el4_5.1samba-3.0.10-2.el4_5.1.ppc.rpm
RedHat4s390xsamba-swat< 3.0.10-2.el4_5.1samba-swat-3.0.10-2.el4_5.1.s390x.rpm
RedHat4i386samba-common< 3.0.10-2.el4_5.1samba-common-3.0.10-2.el4_5.1.i386.rpm
RedHat4ia64samba-common< 3.0.10-2.el4_5.1samba-common-3.0.10-2.el4_5.1.ia64.rpm
RedHat4s390xsamba< 3.0.10-2.el4_5.1samba-3.0.10-2.el4_5.1.s390x.rpm
RedHat4x86_64samba< 3.0.10-2.el4_5.1samba-3.0.10-2.el4_5.1.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	4	i386	samba	< 3.0.10-2.el4_5.1	samba-3.0.10-2.el4_5.1.i386.rpm
RedHat	4	s390	samba-client	< 3.0.10-2.el4_5.1	samba-client-3.0.10-2.el4_5.1.s390.rpm
RedHat	4	ia64	samba-swat	< 3.0.10-2.el4_5.1	samba-swat-3.0.10-2.el4_5.1.ia64.rpm
RedHat	4	x86_64	samba-client	< 3.0.10-2.el4_5.1	samba-client-3.0.10-2.el4_5.1.x86_64.rpm
RedHat	4	ppc	samba	< 3.0.10-2.el4_5.1	samba-3.0.10-2.el4_5.1.ppc.rpm
RedHat	4	s390x	samba-swat	< 3.0.10-2.el4_5.1	samba-swat-3.0.10-2.el4_5.1.s390x.rpm
RedHat	4	i386	samba-common	< 3.0.10-2.el4_5.1	samba-common-3.0.10-2.el4_5.1.i386.rpm
RedHat	4	ia64	samba-common	< 3.0.10-2.el4_5.1	samba-common-3.0.10-2.el4_5.1.ia64.rpm
RedHat	4	s390x	samba	< 3.0.10-2.el4_5.1	samba-3.0.10-2.el4_5.1.s390x.rpm
RedHat	4	x86_64	samba	< 3.0.10-2.el4_5.1	samba-3.0.10-2.el4_5.1.x86_64.rpm