Solution
Please Install the Updated Packages.
Insight
Samba is a suite of programs used by machines to share files, printers, and other information.
A stack buffer overflow flaw was found in the way Samba authenticates remote users. A remote unauthenticated user could trigger this flaw to cause the Samba server to crash, or execute arbitrary code with the permissions of the Samba server. (CVE-2007-6015)
Red Hat would like to thank Alin Rad Pop of Secunia Research for responsibly disclosing this issue.
This update also fixes a regression caused by the fix for CVE-2007-4572, which prevented some clients from being able to properly access shares.
Users of Samba are advised to upgrade to these updated packages, which contain a backported patch to resolve these issues.
Affected
samba on Red Hat Enterprise Linux AS (Advanced Server) version 2.1, Red Hat Enterprise Linux ES version 2.1,
Red Hat Enterprise Linux WS version 2.1,
Red Hat Enterprise Linux AS version 3,
Red Hat Enterprise Linux ES version 3,
Red Hat Enterprise Linux WS version 3,
Red Hat Enterprise Linux AS version 4,
Red Hat Enterprise Linux ES version 4,
Red Hat Enterprise Linux WS version 4,
Red Hat Enterprise Linux (v. 5 server)
References
Updated on 2015-03-25
Severity
Classification
-
CVE CVE-2007-4572, CVE-2007-6015 -
CVSS Base Score: 9.3
AV:N/AC:M/Au:N/C:C/I:C/A:C
Related Vulnerabilities