Summary
Samba is prone to an information-disclosure vulnerability.
Successful exploits will allow attackers to obtain arbitrary memory contents.
This issue affects Samba 3.0.29 through 3.2.4.
Solution
Updates are available. Please see the references for more information.
References
- http://sourceforge.net/project/shownotes.php?group_id=151951&release_id=503763
- http://support.avaya.com/elmodocs2/security/ASA-2009-014.htm
- http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=838290
- http://us1.samba.org/samba/security/CVE-2008-4314.html
- http://www.samba.org
- http://www.securityfocus.com/bid/32494
Updated on 2017-03-28
Severity
Classification
-
CVE CVE-2008-4314 -
CVSS Base Score: 8.5
AV:N/AC:L/Au:N/C:C/I:N/A:P
Related Vulnerabilities
- Adobe Acrobat and Reader PDF Handling Code Execution Vulnerability (Windows)
- Adobe Acrobat Multiple Vulnerabilities -01 Jan 13 (Windows)
- Adobe Flash Player 'SWF' File Multiple Code Execution Vulnerability - Windows
- Adobe AIR Security Bypass Vulnerability Jan14 (Mac OS X)
- Adobe Acrobat Multiple Vulnerabilities -01 Jan 13 (Mac OS X)