Updated Samba packages that fix a security vulnerability are now available.

Samba is a suite of utilities which provides file and printer sharing services to SMB/CIFS clients.

A security vulnerability has been found in versions of Samba up to and including 2.2.8. An anonymous user could exploit the vulnerability to gain root access on the target machine. Note that this is a different vulnerability than the one fixed by RHSA-2003:096.

An exploit for this vulnerability is publicly available.

All users of Samba are advised to update to the packages listed in this erratum, which contain a backported patch correcting this vulnerability.

リモートホストで実行されているSambaのバージョンは2.2.8aより前です。したがって、smbdのSMB/CIFSパケットフラグメント再構成コードにあるリモートコード実行の脆弱性の影響を受けます。認証されていないリモートの攻撃者がこれを悪用し、バイナリ専用エクスプロイトコードをsmbdに挿入し、Sambaサービスシステムのルートアクセスを取得する可能性があります。Nessusはこの問題をテストしておらず、代わりにアプリケーションの自己報告されたバージョン番号にのみ依存しています。

遠端主機上執行的 Samba 版本比 2.2.8a 舊。因此，會受到 smbd 的 SMB/CIFS 封包片段重組程式碼中一個遠端程式碼執行弱點的影響。未經驗證的遠端攻擊者可加以惡意利用，將二進位特定惡意利用程式碼插入 smbd，並在 Samba 伺服系統上取得 root 存取權限。請注意，Nessus 並未測試此問題，而是僅依據應用程式自我報告的版本號碼。

远程主机上运行的 Samba 版本低于 2.2.8a。因此，会受到 smbd 的 SMB/CIFS 数据包碎片重组代码中远程代码执行漏洞的影响。未经身份验证的远程攻击者可利用此问题，将二进制特定恶意利用代码注入 smbd，并在 Samba 服务系统上取得根访问权限。请注意，Nessus 没有测试此问题，而仅依赖于应用程序自我报告的版本号。

远程 Samba 服务器在调用函数 trans2open() 时容易受到一个缓冲区溢出漏洞的影响。攻击者可能会利用此缺陷获取此主机上的根 shell 。

此外，据报告，此版本的 Samba 容易受到其他溢出漏洞的影响，但 Nessus 尚未对其进行检查。

The version of Samba running on the remote host is prior to 2.2.8a. It is, therefore, affected by a remote code execution vulnerability in the SMB/CIFS packet fragment re-assembly code in smbd.  An unauthenticated, remote attacker can exploit this to inject binary specific exploit code into smbd and gain root access on a Samba serving system.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Digital Defense, Inc. has alerted the Samba Team to a serious vulnerability in Samba, a LanManager-like file and printer server for Unix. This vulnerability can lead to an anonymous user gaining root access on a Samba serving system. An exploit for this problem is already circulating and in use.

Since the packages for potato are quite old it is likely that they contain more security-relevant bugs that we don't know of. You are therefore advised to upgrade your systems running Samba to woody soon.

Unofficial backported packages from the Samba maintainers for version 2.2.8 of Samba for woody are available at ~peloy and ~vorlon.

The remote host is missing a security patch for samba. It is, therefore, affected by a buffer overflow condition in the call_trans2open() function within file trans2.c due to improper sanitization of user-supplied input. An unauthenticated, remote attacker can exploit this, via an overly long string passed to the pname variable, to execute arbitrary code with the privileges of the server.

An exploitable buffer overflow was discovered in the Samba server that can lead to an anonymous remote root compromise. The Samba Team also discovered some potential overflows during an internal code audit which was done in response to the previously noted buffer overflow problem.

All versions of Samba prior to 2.2.8a are vulnerable. The provided updates contain a patch from the Samba Team to correct the issue.

An exploit is known to exist and all Mandrake Linux users are encouraged to upgrade immediately.

The remote Samba server is vulnerable to a buffer overflow when it calls the function trans2open(). An attacker may exploit this flaw to gain a root shell on this host.

In addition, it is reported that this version of Samba is vulnerable to additional overflows, although Nessus has not checked for them.

The remote Samba server is vulnerable to a buffer overflow when it processes the function trans2open().  An attacker may exploit it to gain a root shell on this host.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
12387	RHEL 2.1 : samba (RHSA-2003:138)	Nessus	Red Hat Local Security Checks	2004/7/6	2021/1/14	critical
122056	Samba < 2.2.8aのリモートでコードが実行される脆弱性	Nessus	Misc.	2019/2/8	2019/10/31	high
122056	Samba < 2.2.8a Remote Code Execution Vulnerability	Nessus	Misc.	2019/2/8	2019/10/31	high
122056	Samba < 2.2.8a Remote Code Execution Vulnerability	Nessus	Misc.	2019/2/8	2019/10/31	high
11523	Samba < 2.2.8a / 3.0.0 多个远程溢出	Nessus	Gain a shell remotely	2003/4/7	2018/7/27	critical
122056	Samba < 2.2.8a Remote Code Execution Vulnerability	Nessus	Misc.	2019/2/8	2019/10/31	high
15117	Debian DSA-280-1 : samba - buffer overflow	Nessus	Debian Local Security Checks	2004/9/29	2021/1/4	critical
13795	SUSE-SA:2003:025: samba	Nessus	SuSE Local Security Checks	2004/7/25	2021/1/14	critical
14028	Mandrake Linux Security Advisory : samba (MDKSA-2003:044)	Nessus	Mandriva Local Security Checks	2004/7/31	2021/1/6	critical
11523	Samba < 2.2.8a / 3.0.0 Multiple Remote Overflows	Nessus	Gain a shell remotely	2003/4/7	2018/7/27	critical
1342	Samba < 2.2.8a 'trans2.c trans2open()' Function Overflow	Nessus Network Monitor	Samba	2004/8/20	2019/3/6	critical

検出

プラグインの検索

critical

high

high

high

critical

high

critical

critical

critical

critical

critical