[Forgot Password]
Login  Register Subscribe

30389

 
 

423868

 
 

244625

 
 

909

 
 

193379

 
 

277

Paid content will be excluded from the download.


Download | Alert*
OVAL

RHSA-2014:0866-01 -- Redhat samba3x and samba

ID: oval:org.secpod.oval:def:501331Date: (C)2014-07-15   (M)2023-12-07
Class: PATCHFamily: unix




Samba is an open-source implementation of the Server Message Block or Common Internet File System protocol, which allows PC-compatible machines to share files, printers, and other information. A denial of service flaw was found in the way the sys_recvfile function of nmbd, the NetBIOS message block daemon, processed non-blocking sockets. An attacker could send a specially crafted packet that, when processed, would cause nmbd to enter an infinite loop and consume an excessive amount of CPU time. It was discovered that smbd, the Samba file server daemon, did not properly handle certain files that were stored on the disk and used a valid Unicode character in the file name. An attacker able to send an authenticated non-Unicode request that attempted to read such a file could cause smbd to crash. Red Hat would like to thank Daniel Berteaud of FIREWALL-SERVICES SARL for reporting CVE-2014-0244, and the Samba project for reporting CVE-2014-3493. The Samba project acknowledges Simon Arlott as the original reporter of CVE-2014-3493. All Samba users are advised to upgrade to these updated packages, which contain backported patches to correct these issues. After installing this update, the smb service will be restarted automatically.

Platform:
Red Hat Enterprise Linux 6
Red Hat Enterprise Linux 5
Product:
samba3x
samba
Reference:
RHSA-2014:0866-01
CVE-2014-0244
CVE-2014-3493
CVE    2
CVE-2014-0244
CVE-2014-3493
CPE    56
cpe:/a:samba:samba:3.6.20
cpe:/a:samba:samba:3.6.7
cpe:/a:samba:samba:3.6.8
cpe:/a:samba:samba:3.6.5
...

© SecPod Technologies