Ubuntu Security Notices
USN-460-1

USN-460-1: Samba vulnerabilities

Publication date

16 May 2007

Overview

Samba vulnerabilities

Releases

Details

Paul Griffith and Andrew Hogue discovered that Samba did not fully drop
root privileges while translating SIDs. A remote authenticated user
could issue SMB operations during a small window of opportunity and gain
root privileges. (CVE-2007-2444)

Brian Schafer discovered that Samba did not handle NDR parsing
correctly. A remote attacker could send specially crafted MS-RPC
requests that could overwrite heap memory and execute arbitrary code.
(CVE-2007-2446)

It was discovered that Samba did not correctly escape input parameters
for external scripts defined in smb.conf. Remote authenticated users
could send specially crafted MS-RPC requests and execute arbitrary shell
commands. (CVE-2007-2447)

Update instructions

In general, a standard system upgrade is sufficient to effect the necessary changes.

Learn more about how to get the fixes.

The problem can be corrected by updating your system to the following package versions:

Ubuntu Release	Package Version
7.04 feisty	samba – 3.0.24-2ubuntu1.1
6.10 edgy	samba – 3.0.22-1ubuntu4.2
6.06 dapper	samba – 3.0.22-1ubuntu3.3

Reduce your security exposure

Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.

Get Ubuntu Pro

USN-460-1: Samba vulnerabilities

Details

Update instructions

Reduce your security exposure

References