1. Ubuntu Security Notices
  2. USN-893-1

USN-893-1: Samba vulnerability

Publication date

28 January 2010

Overview

Samba vulnerability

Releases

Packages

Details

Ronald Volgers discovered that the mount.cifs utility, when installed as a
setuid program, suffered from a race condition when verifying user
permissions. A local attacker could trick samba into mounting over
arbitrary locations, leading to a root privilege escalation.

Ronald Volgers discovered that the mount.cifs utility, when installed as a
setuid program, suffered from a race condition when verifying user
permissions. A local attacker could trick samba into mounting over
arbitrary locations, leading to a root privilege escalation.

Update instructions

In general, a standard system upgrade is sufficient to effect the necessary changes.

Learn more about how to get the fixes.

The problem can be corrected by updating your system to the following package versions:

Ubuntu Release Package Version
9.10 karmic smbfs –  2:3.4.0-3ubuntu5.4
9.04 jaunty smbfs –  2:3.3.2-1ubuntu3.3
8.10 intrepid smbfs –  2:3.2.3-1ubuntu3.7
8.04 hardy smbfs –  3.0.28a-1ubuntu4.10
6.06 dapper smbfs –  3.0.22-1ubuntu3.10

Reduce your security exposure

Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.

Get Ubuntu Pro

References

Have additional questions?

Talk to a member of the team ›