Paketname
samba
Datum
2010-05-04
Advisory ID
MDVSA-2010:090-1
Betroffene Versionen
2010.0 x86_64 , 2010.0 i586

Problembeschreibung

Multiple vulnerabilies has been found and corrected in samba:

client/mount.cifs.c in mount.cifs in smbfs in Samba does not verify
that the (1) device name and (2) mountpoint strings are composed of
valid characters, which allows local users to cause a denial of service
(mtab corruption) via a crafted string (CVE-2010-0547).

client/mount.cifs.c in mount.cifs in smbfs in Samba allows local users
to mount a CIFS share on an arbitrary mountpoint, and gain privileges,
via a symlink attack on the mountpoint directory file (CVE-2010-0787).

The updated packages have been patched to correct these issues.

Update:

It was discovered that the previous Samba update required libtalloc
from Samba4 package. Therefore, this update provides the required
packages in order to fix the issue.

Aktualisierte Pakete

2010.0 x86_64

 b1318d1c6ecedeeb4da4972643a19c13  2010.0/x86_64/ldb-utils-0.9.3-0.4.alpha8.1mdv2010.0.x86_64.rpm
 5eb775ff7af941e88623013ca49c559f  2010.0/x86_64/lib64dcerpc0-0.0.1-0.4.alpha8.1mdv2010.0.x86_64.rpm
 017bd8047240704ca5162f4a0b3dd77f  2010.0/x86_64/lib64dcerpc-devel-0.0.1-0.4.alpha8.1mdv2010.0.x86_64.rpm
 2ea7bb6f8405f525175e3392f084befc  2010.0/x86_64/lib64ldb0-0.9.3-0.4.alpha8.1mdv2010.0.x86_64.rpm
 ab732bb499ce71c5a52df68fedfe4bb9  2010.0/x86_64/lib64ldb-devel-0.9.3-0.4.alpha8.1mdv2010.0.x86_64.rpm
 fcc211d9ff438446b3bf3031f9c0302e  2010.0/x86_64/lib64ndr0-0.0.1-0.4.alpha8.1mdv2010.0.x86_64.rpm
 1dcd1ddf1e40a7e9d9ab9c9973d1dc2f  2010.0/x86_64/lib64ndr-devel-0.0.1-0.4.alpha8.1mdv2010.0.x86_64.rpm
 b84a96186f833edce6fc344294978348  2010.0/x86_64/lib64samba-hostconfig0-0.0.1-0.4.alpha8.1mdv2010.0.x86_64.rpm
 59585b08d0a4a045d4491bb8c850f57d  2010.0/x86_64/lib64samba-hostconfig-devel-0.0.1-0.4.alpha8.1mdv2010.0.x86_64.rpm
 628818c2b6dbc7a5bdb2e32ce6130f78  2010.0/x86_64/lib64talloc1-4.0.0-0.4.alpha8.1mdv2010.0.x86_64.rpm
 f58686dd7985f44d590f9c98cbde29bf  2010.0/x86_64/lib64talloc-devel-4.0.0-0.4.alpha8.1mdv2010.0.x86_64.rpm
 75a100c230b65b5ffe3540338f96b851  2010.0/x86_64/lib64tdb1-4.0.0-0.4.alpha8.1mdv2010.0.x86_64.rpm
 a02aeb66c298487f7c344a0011c2312a  2010.0/x86_64/lib64tdb-devel-4.0.0-0.4.alpha8.1mdv2010.0.x86_64.rpm
 e7f39aaa5f422d699d0c73392fe9a796  2010.0/x86_64/lib64tevent0-4.0.0-0.4.alpha8.1mdv2010.0.x86_64.rpm
 acd94c5883f1f7f433f1f63a52df499c  2010.0/x86_64/lib64tevent-devel-4.0.0-0.4.alpha8.1mdv2010.0.x86_64.rpm
 6d91debc61ab281e359b3719d8caa444  2010.0/x86_64/mount-cifs4-4.0.0-0.4.alpha8.1mdv2010.0.x86_64.rpm
 fc06ddb728a6a09e8d53d490cd0716be  2010.0/x86_64/samba4-client-4.0.0-0.4.alpha8.1mdv2010.0.x86_64.rpm
 4e1a3e4547bce103ab26e25b9fb3780b  2010.0/x86_64/samba4-common-4.0.0-0.4.alpha8.1mdv2010.0.x86_64.rpm
 90de7437d5746a8b9bb73d498483775f  2010.0/x86_64/samba4-devel-4.0.0-0.4.alpha8.1mdv2010.0.x86_64.rpm
 5e41d73b7a195194197e2939671694e2  2010.0/x86_64/samba4-pidl-4.0.0-0.4.alpha8.1mdv2010.0.x86_64.rpm
 758b6b558fe40817a7fbd9dc3ac2f048  2010.0/x86_64/samba4-python-4.0.0-0.4.alpha8.1mdv2010.0.x86_64.rpm
 e8443f11a48077b369f4439d138c85e0  2010.0/x86_64/samba4-server-4.0.0-0.4.alpha8.1mdv2010.0.x86_64.rpm
 96053f726342035db307d73d3696c847  2010.0/x86_64/samba4-test-4.0.0-0.4.alpha8.1mdv2010.0.x86_64.rpm
 b9628165fe466ece2a0f335026c2feeb  2010.0/x86_64/tdb-utils-4.0.0-0.4.alpha8.1mdv2010.0.x86_64.rpm 
 b7504617214cb1034a29580b2b697593  2010.0/SRPMS/samba4-4.0.0-0.4.alpha8.1mdv2010.0.src.rpm

2010.0 i586

 8f5f819b50cfaf62c238e6758791b5b5  2010.0/i586/ldb-utils-0.9.3-0.4.alpha8.1mdv2010.0.i586.rpm
 d8c57b97736f3f508e900dd7c12e57cc  2010.0/i586/libdcerpc0-0.0.1-0.4.alpha8.1mdv2010.0.i586.rpm
 7733733a537e8b9042d60f0a8e9ee99e  2010.0/i586/libdcerpc-devel-0.0.1-0.4.alpha8.1mdv2010.0.i586.rpm
 e2c3eb439d594264dcb1bf6b5c7ae86f  2010.0/i586/libldb0-0.9.3-0.4.alpha8.1mdv2010.0.i586.rpm
 3abb81c0ae4ff4bf341758947c8ba894  2010.0/i586/libldb-devel-0.9.3-0.4.alpha8.1mdv2010.0.i586.rpm
 054ef02b0fb4a323227eb2667441e472  2010.0/i586/libndr0-0.0.1-0.4.alpha8.1mdv2010.0.i586.rpm
 19cc9ed139ed38be30107b4f9bc31b1b  2010.0/i586/libndr-devel-0.0.1-0.4.alpha8.1mdv2010.0.i586.rpm
 71fe32545cebfda6eb9f97391e908561  2010.0/i586/libsamba-hostconfig0-0.0.1-0.4.alpha8.1mdv2010.0.i586.rpm
 9e18cb55d07d03a2c3211a3cdafb9214  2010.0/i586/libsamba-hostconfig-devel-0.0.1-0.4.alpha8.1mdv2010.0.i586.rpm
 a43658c727b5f5aa7afbcf19ae3e3231  2010.0/i586/libtalloc1-4.0.0-0.4.alpha8.1mdv2010.0.i586.rpm
 cada4bdc04addcb04fb138527bb2a995  2010.0/i586/libtalloc-devel-4.0.0-0.4.alpha8.1mdv2010.0.i586.rpm
 1babaa5946dc9c4e2fe94a75bf5507a8  2010.0/i586/libtdb1-4.0.0-0.4.alpha8.1mdv2010.0.i586.rpm
 866766e571c43afaf59774dc7a47d3cc  2010.0/i586/libtdb-devel-4.0.0-0.4.alpha8.1mdv2010.0.i586.rpm
 2539a4810e03b0a77a8c5c4faaeb87fe  2010.0/i586/libtevent0-4.0.0-0.4.alpha8.1mdv2010.0.i586.rpm
 3fd0b63a1a6314d813fea5b5298fa4db  2010.0/i586/libtevent-devel-4.0.0-0.4.alpha8.1mdv2010.0.i586.rpm
 7fc867d4ea2d094338b7456eb953a8a4  2010.0/i586/mount-cifs4-4.0.0-0.4.alpha8.1mdv2010.0.i586.rpm
 be9d83f8825cdb4616b76f094c595ecd  2010.0/i586/samba4-client-4.0.0-0.4.alpha8.1mdv2010.0.i586.rpm
 72add693d66463d5494dd058cc4213d4  2010.0/i586/samba4-common-4.0.0-0.4.alpha8.1mdv2010.0.i586.rpm
 7de52ea9aa7059da0d9f3c86e4602992  2010.0/i586/samba4-devel-4.0.0-0.4.alpha8.1mdv2010.0.i586.rpm
 0d1cd1855cf928fb7965e3beecba6784  2010.0/i586/samba4-pidl-4.0.0-0.4.alpha8.1mdv2010.0.i586.rpm
 f6d8e5e2a8eec0b77e6aab6ee83d6578  2010.0/i586/samba4-python-4.0.0-0.4.alpha8.1mdv2010.0.i586.rpm
 3b80378f5de30d4ed1e18073ccdeef16  2010.0/i586/samba4-server-4.0.0-0.4.alpha8.1mdv2010.0.i586.rpm
 ee6a79c118912689cb52547a34649e41  2010.0/i586/samba4-test-4.0.0-0.4.alpha8.1mdv2010.0.i586.rpm
 17985a3819fa0dcdbdf22a6c648736ce  2010.0/i586/tdb-utils-4.0.0-0.4.alpha8.1mdv2010.0.i586.rpm 
 b7504617214cb1034a29580b2b697593  2010.0/SRPMS/samba4-4.0.0-0.4.alpha8.1mdv2010.0.src.rpm

Referenzen