[Forgot Password]
Login  Register Subscribe

24436

 
 

131815

 
 

115228

 
 

909

 
 

90122

 
 

140

Paid content will be excluded from the download.


Download | Alert*
OVAL

MDVSA-2010:141 -- Mandriva samba

ID: oval:org.secpod.oval:def:300065Date: (C)2012-01-07   (M)2018-08-14
Class: PATCHFamily: unix




Multiple vulnerabilities has been discovered and corrected in samba: The chain_reply function in process.c in smbd in Samba before 3.4.8 and 3.5.x before 3.5.2 allows remote attackers to cause a denial of service via a Negotiate Protocol request with a certain 0x0003 field value followed by a Session Setup AndX request with a certain 0x8003 field value . The reply_sesssetup_and_X_spnego function in sesssetup.c in smbd in Samba before 3.4.8 and 3.5.x before 3.5.2 allows remote attackers to trigger an out-of-bounds read, and cause a denial of service , via a \xff\xff security blob length in a Session Setup AndX request . The updated packages provides samba 3.4.8 which is not vulnerable to these issues.

Platform:
Mandriva Linux 2010.0
Product:
samba
Reference:
MDVSA-2010:141
CVE-2010-1642
CVE-2010-1635
CVE    2
CVE-2010-1635
CVE-2010-1642

© SecPod Technologies