Samba is a suite of programs used by machines to share files, printers, and
other information.
A buffer overflow flaw was found in the way Samba creates NetBIOS replies.
If a Samba server is configured to run as a WINS server, a remote
unauthenticated user could cause the Samba server to crash, or execute
arbitrary code. (CVE-2007-5398)
Red Hat would like to thank Alin Rad Pop of Secunia Research for
responsibly disclosing this issue.
Users of Samba should upgrade to these updated packages, which contain a
backported patch to correct this issue.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
RedHat | 4 | i386 | samba | <Β 3.0.10-2.el4_5.1 | samba-3.0.10-2.el4_5.1.i386.rpm |
RedHat | 4 | s390 | samba-client | <Β 3.0.10-2.el4_5.1 | samba-client-3.0.10-2.el4_5.1.s390.rpm |
RedHat | 4 | ia64 | samba-swat | <Β 3.0.10-2.el4_5.1 | samba-swat-3.0.10-2.el4_5.1.ia64.rpm |
RedHat | 4 | x86_64 | samba-client | <Β 3.0.10-2.el4_5.1 | samba-client-3.0.10-2.el4_5.1.x86_64.rpm |
RedHat | 4 | ppc | samba | <Β 3.0.10-2.el4_5.1 | samba-3.0.10-2.el4_5.1.ppc.rpm |
RedHat | 4 | s390x | samba-swat | <Β 3.0.10-2.el4_5.1 | samba-swat-3.0.10-2.el4_5.1.s390x.rpm |
RedHat | 4 | i386 | samba-common | <Β 3.0.10-2.el4_5.1 | samba-common-3.0.10-2.el4_5.1.i386.rpm |
RedHat | 4 | ia64 | samba-common | <Β 3.0.10-2.el4_5.1 | samba-common-3.0.10-2.el4_5.1.ia64.rpm |
RedHat | 4 | s390x | samba | <Β 3.0.10-2.el4_5.1 | samba-3.0.10-2.el4_5.1.s390x.rpm |
RedHat | 4 | x86_64 | samba | <Β 3.0.10-2.el4_5.1 | samba-3.0.10-2.el4_5.1.x86_64.rpm |