|
Samba Multiple ASN.1 and MailSlot Parsing Remote Denial Of Service Vulnerabilities
Solution: SuSE has released advisory SUSE-SA:2004:034 mainly to address the vulnerability described in BID 11196. However, in the addendum of this advisory, it is reported that fixes for the issues described in this BID are now available on the SuSE update FTP server for download. Customers are advised to see the referenced advisory for further information regarding obtaining and applying appropriate updates. Gentoo Linux has released advisory GLSA 200409-16 dealing with these issues. They have advised that all Samba 3.x users should upgrade to the latest version: emerge sync emerge -pv ">=net-fs/samba-3.0.7" emerge ">=net-fs/samba-3.0.7" For more information, please see the referenced Gentoo advisory. Mandrakelinux has released advisory MDKSA-2004:092 along with fixes to address these issues. Please see the referenced advisory for further information. Trustix Linux has released advisory TSL-2004-0046 along with fixes dealing with this issue. Please see the referenced advisory for more information. OpenPKG has released an advisory (OpenPKG-SA-2004.040) dealing with this issue. Please see the referenced advisory for more information. The vendor has released a patch that resolves these issues. RedHat has released an advisory (RHSA-2004:467-04) to address these issues in Red Hat Enterprise Linux. Please see the advisory in Web references for more information. Conectiva Linux has released advisory CLA-2004:873 along with fixes to address this issue. Please see the referenced advisory for further information. SGI has released security advisory 20041201-01-P along with a patch dealing with this issue. It should be noted that the released patch only fixes samba_irix version 3.0.7. All users running the affected application, which is not installed by default, are advised to apply the patch. Samba Samba 3.0.2 a
Samba Samba 3.0.4
Samba Samba 3.0.5
Samba Samba 3.0.6
SGI samba_irix 3.0.7
|
|
 Privacy Statement |
