Solution
Please Install the Updated Packages.
Insight
Samba is a suite of programs used by machines to share files, printers, and other information.
A stack buffer overflow flaw was found in the way Samba authenticates remote users. A remote unauthenticated user could trigger this flaw to cause the Samba server to crash, or execute arbitrary code with the permissions of the Samba server. (CVE-2007-6015)
Red Hat would like to thank Alin Rad Pop of Secunia Research for responsibly disclosing this issue.
This update also fixes a regression caused by the fix for CVE-2007-4572, which prevented some clients from being able to properly access shares.
Users of Samba are advised to upgrade to these updated packages, which contain a backported patch to resolve these issues.
Affected
samba on CentOS 3
References
Updated on 2015-03-25
Severity
Classification
-
CVE CVE-2007-4572, CVE-2007-6015 -
CVSS Base Score: 9.3
AV:N/AC:M/Au:N/C:C/I:C/A:C
Related Vulnerabilities