Samba CAP_DAC_OVERRIDE文件权限绕过安全限制漏洞

BUGTRAQ ID: 38606 CVE ID: CVE-2010-0728 Samba是一套实现SMB（Server Messages Block）协议、跨平台进行文件共享和打印共享服务的程序。 如果启用了libcap支持，则所有的smbd进程都继承了CAPDACOVERRIDE功能标记，这允许通过认证的远程用户通过标准的文件系统操作绕过预期的文件权限限制读写访问文件。 Samba Samba 3.5.0 Samba Samba 3.4.6 Samba Samba 3.3.11 厂商补丁： Samba ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

DEBIAN-CVE-2010-0728

smbd in Samba 3.3.11, 3.4.6, and 3.5.0, when libcap support is enabled, runs with the CAPDACOVERRIDE capability, which allows remote authenticated users to bypass intended file permissions via standard filesystem operations with any client...

Input validation

smbd in Samba 3.3.11, 3.4.6, and 3.5.0, when libcap support is enabled, runs with the CAPDACOVERRIDE capability, which allows remote authenticated users to bypass intended file permissions via standard filesystem operations with any client...

CVE-2010-0728

CVE-2010-0728 concerns: in Samba, the smbd service runs with CAP_DAC_OVERRIDE when libcap support is enabled in Samba 3.3.11, 3.4.6, and 3.5.0, enabling remote authenticated users to bypass file permissions via standard filesystem operations. The connected documents confirm this exact root cause ...

Mandriva Linux Security Advisory : wireshark (MDVSA-2008:001-1)

A number of vulnerabilities in the Wireshark program were found that could cause crashes, excessive looping, or arbitrary code execution. This update provides Wireshark 0.99.7 which is not vulnerable to these issues. An updated version of libsmi is also being provided, not because of security...

Mandriva Update for wireshark MDVSA-2008:001-1 (wireshark)

Check for the Version of wireshark OpenVAS Vulnerability Test Mandriva Update for wireshark MDVSA-2008:001-1 wireshark Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify...