117 matches found
Fedora 8 : samba-3.0.27-0.fc8 (2007-3403)
Security Fixes : - CVE-2007-4572 - CVE-2007-5398 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...
Ubuntu 6.06 LTS / 6.10 / 7.04 / 7.10 : samba regression (USN-544-2)
USN-544-1 fixed two vulnerabilities in Samba. Fixes for CVE-2007-5398 are unchanged, but the upstream changes for CVE-2007-4572 introduced a regression in all releases which caused Linux smbfs mounts to fail. Additionally, Dapper and Edgy included an incomplete patch which caused configurations...
Mandrake Linux Security Advisory : samba (MDKSA-2007:224-3)
The samba developers discovered that nmbd could be made to overrun a buffer during the processing of GETDC logon server requests. If samba is configured as a Primary or Backup Domain Controller, this could be used by a remote attacker to send malicious logon requests and possibly cause a denial o...
[slackware-security] samba
New samba packages are available for Slackware 10.0, 10.1, 10.2, 11.0, 12.0, and -current to fix security issues. More details about these issues may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2007-4572 https://vulners.com/cve/CVE-2007-5398 Here...
Samba NMBD登录请求远程溢出漏洞
BUGTRAQ ID: 26454 CVECAN ID: CVE-2007-4572 Samba是一套实现SMB（Server Messages Block）协议、跨平台进行文件共享和打印共享服务的程序。 Samba的nmbd在处理GETDC登录服务器请求时存在缓冲器溢出漏洞，可能导致非预期的服务器行为。 如果远程攻击者发送了畸形的GETDC请求的话就可以触发这个漏洞，但无法利用这个溢出执行任意指令，在大多数情况下也不会导致Samba服务器崩溃。仅在将Samba服务器配置为主或备份域控制器时才会出现这个漏洞。 Samba 3.0.0 - 3.0.26a 临时解决方法：...
USN-544-2: Samba regression
USN-544-1 fixed two vulnerabilities in Samba. Fixes for CVE-2007-5398 are unchanged, but the upstream changes for CVE-2007-4572 introduced a regression in all releases which caused Linux smbfs mounts to fail. Additionally, Dapper and Edgy included an incomplete patch which caused configurations...
CVE-2007-4572
Stack-based buffer overflow in nmbd in Samba 3.0.0 through 3.0.26a, when configured as a Primary or Backup Domain controller, allows remote attackers to have an unknown impact via crafted GETDC mailslot requests, related to handling of GETDC logon server requests...
CVE-2007-4572
The CVE-2007-4572 issue is a stack-based buffer overflow in Samba's nmbd (3.0.0–3.0.26a) when Samba is configured as a Primary or Backup Domain Controller. It is triggered by crafted GETDC mailslot requests related to GETDC logon server handling, allowing remote attackers to impact the system (co...
RHEL 2.1 / 3 : samba (RHSA-2007:1013)
Updated samba packages that fix several security issues are now available for Red Hat Enterprise Linux 2.1 and 3. This update has been rated as having critical security impact by the Red Hat Security Response Team. Samba is a suite of programs used by machines to share files, printers, and other...
Critical: samba security update
3.0.9-1.3E.14 - Security fix for CVE-2007-4572 and CVE-2007-5398 resolves: 350731 resolves: 359101...
[SAMBA] CVE-2007-4572 - GETDC mailslot processing buffer overrun in nmbd
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ========================================================== == == Subject: Stack buffer overflow in nmbd's logon == request processing. == == CVE ID: CVE-2007-4572 == == Versions: Samba 3.0.0 - 3.0.26a inclusive == == Summary: Processing of specially...
RHEL 5 : samba (RHSA-2007:1017)
Updated samba packages that fix security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. Samba is a suite of programs used by machines to share files, printers, and other information. A...
Mandrake Linux Security Advisory : kernel (MDKSA-2006:197)
Some vulnerabilities were discovered and corrected in the Linux 2.6 kernel : Bugs in the netfilter for IPv6 code, as reported by Mark Dowd, were fixed CVE-2006-4572. The ATM subsystem of the Linux kernel could allow a remote attacker to cause a Denial of Service panic via unknown vectors that cau...
CVE-2006-4572
CVE-2006-4572 concerns the Linux kernel’s netfilter ip6_tables. Affects the IPv6 tables implementation in versions prior to 2.6.16.31, allowing remote attackers to bypass security rules: (1) a protocol-disallow rule via a fragment header-adjacent protocol header, and (2) a header-extension rule v...
