|
Samba Filename Mangling Method Buffer Overrun Vulnerability
Solution: Conectiva has released advisory CLA-2004:854 to provide Kernel updates to address this and other issues for Conectiva 8 and 9. Please see the referenced advisory for further details regarding obtaining and applying appropriate updates. Red Hat has released advisory RHSA-2004:404-04 and fixes to address this issue on Red Hat Linux Enterprise platforms. Customers who are affected by this issue are advised to apply the appropriate updates. Customers subscribed to the Red Hat Network may apply the appropriate fixes using the Red Hat Update Agent (up2date). Please see referenced advisory for additional information. OpenPKG has released an advisory (OpenPKG-SA-2004.033) dealing with this issue. Please see the referenced advisory for more information. Conectiva Linux has released advisory CLA-2004:851 dealing with this issue. Please see the referenced advisory for more information. Red Hat has released advisory RHSA-2004:259-23 and fixes to address this issue on Red Hat Linux Enterprise platforms. Customers who are affected by this issue are advised to apply the appropriate updates. Customers subscribed to the Red Hat Network may apply the appropriate fixes using the Red Hat Update Agent (up2date). Please see referenced advisory for additional information. Tinysofa Linux has released advisory TSSA-2004-014 dealing with this issue. Please see the referenced advisory for more information. SuSE Linux has released advisory SUSE-SA:2004:022 along with fixes dealing with this issue. Please see the referenced vendor advisory for more information. Mandrake has released advisory MDKSA-2004:071 dealing with this issue. Please see the referenced advisory for more information. Netwosix Linux has released advisory LNSA-#2004-0015 along with an upgrade dealing with this issue. Please see the referenced advisory for more information. Trustix Secure Linux has released advisory TSL-2004-0039 to address this, and other issues. Please see the referenced advisory for further information. HP has released an advisory (HPSBUX01062 - SSRT4782, revision 0) dealing with this issue. Although no resolution has been provided, they recommend that users set the "mangling method = hash2" or "mangled names = no" in smb.conf to temporarily resolve the issue. Please see the referenced advisory for more information. Gentoo has released fixes for this issue that may be applied with the following commands: emerge sync emerge -pv ">=net-fs/samba-3.0.5" emerge ">=net-fs/samba-3.0.5" Gentoo has released an updated errata advisory (GLSA 200407-21:02) to correct the list of affected and non-affected versions. Please see the attached advisory for further information. RedHat has released advisories FEDORA-2004-284, and FEDORA-2004-285 to address this and other issues in RedHat Fedora Core 1 and 2 respectively. Please see the references advisories for further information. TurboLinux has released advisory TLSA-2004-25 to address this issue. Please see the attached advisory for details on obtaining and applying fixes. The Fedora Legacy project has released advisory FLSA:2102 along with fixes to address this issue for RedHat Linux 7.3 and 9.0. Please see the referenced advisory for further information. Sun has released a security bulletin (#57664) to announce that Solaris includes affected versions of the software and that fixes are pending. The vendor has released an upgrade dealing with this issue. Sun Solaris 9 Sun Solaris 9_x86 Samba Samba 3.0.2 a
Samba Samba 3.0.2
Samba Samba 3.0.3
Samba Samba 3.0.4
|
|
 Privacy Statement |
