Samba security problem fixed

The samba packages in Slackware 8.1 and 9.0 have been upgraded to Samba 2.2.8a to fix a security problem. All sites running samba should upgrade. Here are the details from the Slackware 9.0 ChangeLog: Mon Apr 7 14:26:53 PDT 2003 patches/packages/samba-2.2.8a-i386-1.tgz: Upgraded to samba-2.2.8a...

Critical: Red Hat Security Advisory: samba security update

Updated Samba packages are now available to fix security vulnerabilities found during a code audit. Samba is a suite of utilities which provides file and printer sharing services to SMB/CIFS clients. Sebastian Krahmer discovered a security vulnerability present in unpatched versions of Samba prio...

[SECURITY] [DSA-262-1] samba security fix

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-262-1 [email protected] http://www.debian.org/security/ Wichert Akkerman March 15, 2003 -...

[SECURITY] [DSA-262-1] samba security fix

------------------------------------------------------------------------ Debian Security Advisory DSA-262-1 [email protected] http://www.debian.org/security/ Wichert Akkerman March 15, 2003 - ------------------------------------------------------------------------ Package : samba Problem type :...

DSA-262 samba - remote exploit

Bulletin has no description...

DSA-200 samba - remote exploit

Bulletin has no description...

CVE-2001-0981

HP CIFS/9000 Server SAMBA A.01.07 and earlier with the "unix password sync" option enabled calls the passwd program without specifying the username of the user making the request, which could cause the server to change the password of a different user...

[SECURITY] [DSA-048-3] samba security fix update

Package : samba Problem type : local symlink attack Debian-specific: no Marc Jacobsen from HP discovered that the security fixes from samba 2.0.8 did not fully fix the /tmp symlink attack problem. The samba team released version 2.0.9 to fix that, and those fixes have been added to version...

[SECURITY] [DSA-048-1] samba symlink attacks

Package : samba Problem type : symlink attack Debian-specific: no Marcus Meissner discovered that samba was not creating temporary files safely in two places: when a remote user queried a printer queue samba would creates a temporary file in which the queue data would be written. This was doing...

Samba 2.0.8 security fix

I've just released Samba 2.0.8. This release fixes a significant security vulnerability that allows local users to corrupt local devices such as raw disks. For most users the Samba Team recommends Samba 2.2.0 which has just been released. Version 2.2.0 has all the security fixes plus many new...

Symlink attack in (all?) Samba. - Local root walkthrough by Tozz

Symlink attack in all? Samba. - Local root walkthrough by Tozz ================================================================= Requirements: Shell access or any other way to create symlinks A running samba deamon The username and/or password of a user named in the admin lists in one or more...

Samba 2.0.7 - SWAT Logging Failure

// source: https://www.securityfocus.com/bid/1873/info The Samba software suite is a collection of programs that implements the SMB protocol for unix systems, allowing you to serve files and printers to Windows, NT, OS/2 and DOS clients. This protocol is sometimes also referred to as the LanManag...

nt.domain.DoS.txt

Date: Tue, 2 Mar 1999 16:43:10 -0600 From: Paul L Schmehl To: [email protected] Subject: NT Domain DoS and Security Exploit with SAMBA Server Near the end of November of last year, we notified the SAMBA team, NTBUGTRAQ and Microsoft of two problems with SAMBA in an NT domain. The...