MDKSA-2003:032

Nom du paquet
samba
Date
2003-03-15
Advisory ID
MDKSA-2003:032
Affected versions
8.1 i586 , CS2.1 i586 , 8.1 i586 , 8.0 i586 , 9.0 i586 , 8.2 i586 , MNF8.2 i586 , 8.0 i586 , 8.2 i586

Problem description

The SuSE security team, during an audit of the Samba source code, found a flaw in the main smbd code which could allow an external attacker to remotely and anonymously gain root privilege on a system running the Samba server. This flaw exists in all version of Samba 2.x up to and including 2.2.7a. The Samba team announced 2.2.8 today, however these updated packages include a patch that corrects this problem.

MandrakeSoft urges all users to upgrade immediately. If you are unable to apply the updated packages (perhaps due to unavailability on your preferred mirror), the following steps can be taken to protect an unpatched system:

The "hosts allow" and "hosts deny" options in the smb.conf file can be used to allow access to your Samba server by only selected hosts; for example:

   hosts allow = 127.0.0.1 192.168.2.0/24 192.168.3.0/24
   hosts deny  = 0.0.0.0/0

This will disallow all connections from machines that are not the localhost or in the 192.168.2 and 192.168.3 private networks. Alternatively, you can tell Samba to listen to only specific network interfaces by using the "interfaces" and "bind interfaces only" options:

  interfaces = eth1 lo
  bind interfaces only = yes

Obviously, use the internal interface for your network and not an external interface connected to the internet. You may also choose to firewall off some UDP and TCP ports in addition to the previously mentioned suggestions by blocking external access to ports 137 and 138 (UDP) and ports 139 and 445 (TCP).

These steps should only be used as a temporary preventative measure and all users should upgrade as quickly as possible.

Thanks to Sebastian Krahmer and the SuSE security team for performing the audit, Jeremy Allison for providing the fix, and Andrew Tridgell for providing advice on how to protect an unpatched Samba system.

Updated packages

8.1 i586

 c56ad7bbaab34e52592788c2d5ab26c2  ia64/8.1/RPMS/samba-client-2.2.7a-8.1mdk.ia64.rpm
031bf8a6ce97a8dd24b50af5e925a457  ia64/8.1/RPMS/samba-common-2.2.7a-8.1mdk.ia64.rpm
4e58c18e456d97c965d886381f7daa52  ia64/8.1/RPMS/samba-doc-2.2.7a-8.1mdk.ia64.rpm
a1cce762d949e5946543fcdfd286fb3a  ia64/8.1/RPMS/samba-server-2.2.7a-8.1mdk.ia64.rpm
129843f008dadb6081de6c23395a8a84  ia64/8.1/RPMS/samba-swat-2.2.7a-8.1mdk.ia64.rpm
536160396aa14907f6195f42c480c0e3  ia64/8.1/SRPMS/samba-2.2.7a-8.1mdk.src.rpm

CS2.1 i586

 810bfc81419eda40ab94406b80e2fa78  corporate/2.1/RPMS/nss_wins-2.2.7a-8.1mdk.i586.rpm
6ddcdba4b4ddc8de889a68408cf63e6e  corporate/2.1/RPMS/samba-client-2.2.7a-8.1mdk.i586.rpm
dbbf8399e5d5b475e76b4ee4c8aa78ee  corporate/2.1/RPMS/samba-common-2.2.7a-8.1mdk.i586.rpm
94ef44b5ce3a5aededddeb60485c90cd  corporate/2.1/RPMS/samba-doc-2.2.7a-8.1mdk.i586.rpm
ca867675236e7df77aa4901f6f91f21e  corporate/2.1/RPMS/samba-server-2.2.7a-8.1mdk.i586.rpm
3c9dbd347014301c6cc249979170bf19  corporate/2.1/RPMS/samba-swat-2.2.7a-8.1mdk.i586.rpm
15b1406c67b55ecefb228cd40736d8fe  corporate/2.1/RPMS/samba-winbind-2.2.7a-8.1mdk.i586.rpm
536160396aa14907f6195f42c480c0e3  corporate/2.1/SRPMS/samba-2.2.7a-8.1mdk.src.rpm

8.1 i586

 b8c035ddd18cd9da2682f3143e234b5a  8.1/RPMS/samba-client-2.2.7a-8.1mdk.i586.rpm
f28d560e6c86e9315898351f7c528275  8.1/RPMS/samba-common-2.2.7a-8.1mdk.i586.rpm
391bfea011d0bd10a91335754f135f6a  8.1/RPMS/samba-doc-2.2.7a-8.1mdk.i586.rpm
1adccf598ff2488a65e3ac776056d6b8  8.1/RPMS/samba-server-2.2.7a-8.1mdk.i586.rpm
8db945ae3a6f9f880ee9b2c76b4dd084  8.1/RPMS/samba-swat-2.2.7a-8.1mdk.i586.rpm
536160396aa14907f6195f42c480c0e3  8.1/SRPMS/samba-2.2.7a-8.1mdk.src.rpm

8.0 i586

 f705527a1ad9f511a8e61da4e2581bbf  8.0/RPMS/samba-client-2.2.7a-8.1mdk.i586.rpm
2bb5172eb1e79908df14b6829ddfc8eb  8.0/RPMS/samba-common-2.2.7a-8.1mdk.i586.rpm
3db651903659ecf5ca94be587a78057b  8.0/RPMS/samba-doc-2.2.7a-8.1mdk.i586.rpm
aac48811be4dbb7663b31f75f10d56fa  8.0/RPMS/samba-server-2.2.7a-8.1mdk.i586.rpm
8eca4b870ad649dd50635142ef3220e3  8.0/RPMS/samba-swat-2.2.7a-8.1mdk.i586.rpm
536160396aa14907f6195f42c480c0e3  8.0/SRPMS/samba-2.2.7a-8.1mdk.src.rpm

9.0 i586

 810bfc81419eda40ab94406b80e2fa78  9.0/RPMS/nss_wins-2.2.7a-8.1mdk.i586.rpm
6ddcdba4b4ddc8de889a68408cf63e6e  9.0/RPMS/samba-client-2.2.7a-8.1mdk.i586.rpm
dbbf8399e5d5b475e76b4ee4c8aa78ee  9.0/RPMS/samba-common-2.2.7a-8.1mdk.i586.rpm
94ef44b5ce3a5aededddeb60485c90cd  9.0/RPMS/samba-doc-2.2.7a-8.1mdk.i586.rpm
ca867675236e7df77aa4901f6f91f21e  9.0/RPMS/samba-server-2.2.7a-8.1mdk.i586.rpm
3c9dbd347014301c6cc249979170bf19  9.0/RPMS/samba-swat-2.2.7a-8.1mdk.i586.rpm
15b1406c67b55ecefb228cd40736d8fe  9.0/RPMS/samba-winbind-2.2.7a-8.1mdk.i586.rpm
536160396aa14907f6195f42c480c0e3  9.0/SRPMS/samba-2.2.7a-8.1mdk.src.rpm

8.2 i586

 02f8d011f45ee9e58327e255ea83612d  8.2/RPMS/nss_wins-2.2.7a-8.1mdk.i586.rpm
60cd9b4e2992f3165f1817556d3bac53  8.2/RPMS/samba-client-2.2.7a-8.1mdk.i586.rpm
fc333e12163e12c36b04fc4859c55881  8.2/RPMS/samba-common-2.2.7a-8.1mdk.i586.rpm
aee8b9fe6070528d6f336331438a0550  8.2/RPMS/samba-doc-2.2.7a-8.1mdk.i586.rpm
8d826c7806adb99d8052025c286ae974  8.2/RPMS/samba-server-2.2.7a-8.1mdk.i586.rpm
c53dad490cde79b748b1573962f92fce  8.2/RPMS/samba-swat-2.2.7a-8.1mdk.i586.rpm
19e6759a7bcc7e75441f6dacdaaaac09  8.2/RPMS/samba-winbind-2.2.7a-8.1mdk.i586.rpm
536160396aa14907f6195f42c480c0e3  8.2/SRPMS/samba-2.2.7a-8.1mdk.src.rpm

MNF8.2 i586

 60cd9b4e2992f3165f1817556d3bac53  mnf8.2/RPMS/samba-client-2.2.7a-8.1mdk.i586.rpm
fc333e12163e12c36b04fc4859c55881  mnf8.2/RPMS/samba-common-2.2.7a-8.1mdk.i586.rpm
536160396aa14907f6195f42c480c0e3  mnf8.2/SRPMS/samba-2.2.7a-8.1mdk.src.rpm

8.0 i586

 c0619454ddd254a2864f41d1a15b3d31  ppc/8.0/RPMS/samba-client-2.2.7a-8.1mdk.ppc.rpm
a98846ba4a83fa3953c1d910fe9ba650  ppc/8.0/RPMS/samba-common-2.2.7a-8.1mdk.ppc.rpm
2f47b120f0947fa8458e250f214e3689  ppc/8.0/RPMS/samba-doc-2.2.7a-8.1mdk.ppc.rpm
2a48acf9fc1db869a9c7dfac85953b1f  ppc/8.0/RPMS/samba-server-2.2.7a-8.1mdk.ppc.rpm
35491c934f9bdd08b689b5c1b68e57fe  ppc/8.0/RPMS/samba-swat-2.2.7a-8.1mdk.ppc.rpm
536160396aa14907f6195f42c480c0e3  ppc/8.0/SRPMS/samba-2.2.7a-8.1mdk.src.rpm

8.2 i586

 78d9e286b11af034707b39947601bc82  ppc/8.2/RPMS/nss_wins-2.2.7a-8.1mdk.ppc.rpm
0fe779cadcecee5f4b5bf3a5a9e32144  ppc/8.2/RPMS/samba-client-2.2.7a-8.1mdk.ppc.rpm
089e1ef95859b9959cbffe02f3c2bddc  ppc/8.2/RPMS/samba-common-2.2.7a-8.1mdk.ppc.rpm
5fb312afc5d21ccf17ac6a46598a301e  ppc/8.2/RPMS/samba-doc-2.2.7a-8.1mdk.ppc.rpm
786069f299f8b948971dfc546c4b4cb4  ppc/8.2/RPMS/samba-server-2.2.7a-8.1mdk.ppc.rpm
fdc770fca7973d2a64bfce4cb2245b9b  ppc/8.2/RPMS/samba-swat-2.2.7a-8.1mdk.ppc.rpm
6572712f90bcd13c4ca9358a59cb39ff  ppc/8.2/RPMS/samba-winbind-2.2.7a-8.1mdk.ppc.rpm
536160396aa14907f6195f42c480c0e3  ppc/8.2/SRPMS/samba-2.2.7a-8.1mdk.src.rpm

References