Solution
Please Install the Updated Packages.
Insight
A vulnerability has been found and corrected in samba:
Heap-based buffer overflow in process.c in smbd in Samba allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a Batched (aka AndX) request that triggers infinite recursion (CVE-2012-0870).
The updated packages have been patched to correct this issue.
Affected
samba on Mandriva Enterprise Server 5,
Mandriva Enterprise Server 5/X86_64
Severity
Classification
-
CVE CVE-2012-0870 -
CVSS Base Score: 7.9
AV:A/AC:M/Au:N/C:C/I:C/A:C
Related Vulnerabilities
- Mandrake Security Advisory MDVSA-2009:088 (wireshark)
- Mandrake Security Advisory MDVSA-2009:162 (java-1.6.0-openjdk)
- Mandrake Security Advisory MDVSA-2009:083 (mozilla-thunderbird)
- Mandrake Security Advisory MDVSA-2009:072 (perl-MDK-Common)
- Mandrake Security Advisory MDVSA-2009:189 (apache-mod_auth_mysql)