Samba Multiple Unspecified Buffer Overflow Vulnerabilities

Description:

The Samba team disclosed that, prior to v2.2.8a, there exist multiple buffer overflow vulnerabilities. No other information is available.

References:

• BID: http://www.securityfocus.com/bid/7295
• CVE: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2003-0196
• MANDRAKE: http://www.mandriva.com/security/advisories?name=MDKSA-2003:044
• OVAL: http://oval.mitre.org/oval/definitions/data/OVAL564.html
• URL: http://marc.theaimsgroup.com/?l=bugtraq&m=104973186901597&w=2
• URL: http://marc.theaimsgroup.com/?l=bugtraq&m=104974612519064&w=2
• URL: http://www.debian.org/security/2003/dsa-280
• URL: http://www.redhat.com/support/errata/RHSA-2003-137.html
  

Solution:

Upgrade to Samba v2.2.8a

Download and apply the upgrade from: http://hostopia.samba.org/samba/ftp/stable/samba-2.2.8a.tar.gz


Information on these pages is summary information extracted from the NeXpose Vulnerabilty Assessment system. Full details are provided within the NeXpose product for licensed users.