(RHSA-2010:0698) Critical: samba3x security update

2010-09-1400:00:00

access.redhat.com

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.915 High

EPSS

Percentile

98.6%

JSON

Samba is a suite of programs used by machines to share files, printers, and
other information.

A missing array boundary checking flaw was found in the way Samba parsed
the binary representation of Windows security identifiers (SIDs). A
malicious client could send a specially-crafted SMB request to the Samba
server, resulting in arbitrary code execution with the privileges of the
Samba server (smbd). (CVE-2010-3069)

Users of Samba are advised to upgrade to these updated packages, which
contain a backported patch to correct this issue. After installing this
update, the smb service will be restarted automatically.

OSVersionArchitecturePackageVersionFilename
RedHat5i386samba3x< 3.3.8-0.52.el5_5.2samba3x-3.3.8-0.52.el5_5.2.i386.rpm
RedHat5i386libtdb< 1.1.2-52.el5_5.2libtdb-1.1.2-52.el5_5.2.i386.rpm
RedHat5ia64samba3x-common< 3.3.8-0.52.el5_5.2samba3x-common-3.3.8-0.52.el5_5.2.ia64.rpm
RedHat5s390xsamba3x-winbind< 3.3.8-0.52.el5_5.2samba3x-winbind-3.3.8-0.52.el5_5.2.s390x.rpm
RedHat5ppcsamba3x-common< 3.3.8-0.52.el5_5.2samba3x-common-3.3.8-0.52.el5_5.2.ppc.rpm
RedHat5s390libtalloc-devel< 1.2.0-52.el5_5.2libtalloc-devel-1.2.0-52.el5_5.2.s390.rpm
RedHat5x86_64samba3x-winbind< 3.3.8-0.52.el5_5.2samba3x-winbind-3.3.8-0.52.el5_5.2.x86_64.rpm
RedHat5ppcsamba3x-swat< 3.3.8-0.52.el5_5.2samba3x-swat-3.3.8-0.52.el5_5.2.ppc.rpm
RedHat5ppclibtdb< 1.1.2-52.el5_5.2libtdb-1.1.2-52.el5_5.2.ppc.rpm
RedHat5x86_64samba3x-common< 3.3.8-0.52.el5_5.2samba3x-common-3.3.8-0.52.el5_5.2.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	5	i386	samba3x	< 3.3.8-0.52.el5_5.2	samba3x-3.3.8-0.52.el5_5.2.i386.rpm
RedHat	5	i386	libtdb	< 1.1.2-52.el5_5.2	libtdb-1.1.2-52.el5_5.2.i386.rpm
RedHat	5	ia64	samba3x-common	< 3.3.8-0.52.el5_5.2	samba3x-common-3.3.8-0.52.el5_5.2.ia64.rpm
RedHat	5	s390x	samba3x-winbind	< 3.3.8-0.52.el5_5.2	samba3x-winbind-3.3.8-0.52.el5_5.2.s390x.rpm
RedHat	5	ppc	samba3x-common	< 3.3.8-0.52.el5_5.2	samba3x-common-3.3.8-0.52.el5_5.2.ppc.rpm
RedHat	5	s390	libtalloc-devel	< 1.2.0-52.el5_5.2	libtalloc-devel-1.2.0-52.el5_5.2.s390.rpm
RedHat	5	x86_64	samba3x-winbind	< 3.3.8-0.52.el5_5.2	samba3x-winbind-3.3.8-0.52.el5_5.2.x86_64.rpm
RedHat	5	ppc	samba3x-swat	< 3.3.8-0.52.el5_5.2	samba3x-swat-3.3.8-0.52.el5_5.2.ppc.rpm
RedHat	5	ppc	libtdb	< 1.1.2-52.el5_5.2	libtdb-1.1.2-52.el5_5.2.ppc.rpm
RedHat	5	x86_64	samba3x-common	< 3.3.8-0.52.el5_5.2	samba3x-common-3.3.8-0.52.el5_5.2.x86_64.rpm