CERT-In Vulnerability Note
CIVN-2004-0071
Samba smbd Security Descriptor Integer Overflow Vulnerability
Original Issue Date:December 17, 2004
Severity Rating: MEDIUM
Systems Affected
Samba 2.x, 3.x
Overview
An Integer overflow vulnerability exists within smbd security descriptor. On exploitation of this vulnerability attackers may get root privilege.
Description
Samba is an open source implementation of SMB/CIFS protocol for file sharing between windows and non-windows system.
The vulnerability exists within the SMBD security descriptor. Sending an extremely large amount of security descriptors causes a heap based buffer overflow. Successful exploitation of this vulnerability allows an attacker to gain root privilege on the target system. In order to exploit this code an attacker requires minimal credentials to access the samba share.
Solution
Appropriate patches are being released by samba.org and other vendors
Vendor Information
Samba
http://www.samba.org/samba/ftp/patches/security/
Redhat
http://rhn.redhat.com/
References
Idefense Security Advisory 12.16.04:
http://www.idefense.com/application/poi/display?id=165
Secunia Advisory: SA13453
http://secunia.com/advisories/13453/
samba.org
http://us1.samba.org/samba/security/CAN-2004-1154.html
Disclaimer
The information provided herein is on "as is" basis, without warranty of any kind.
Contact Information
Email: info@cert-in.org.in Phone: +91-11-2436857
Postal address
Indian Computer Emergency Response Team (CERT-In)
Ministry of Electronics and Information Technology
Government of India
Electronics Niketan
6, CGO Complex, Lodhi Road,
New Delhi - 110 003
India
|