Oval Definition:oval:org.mitre.oval:def:11543
Revision Date:2015-02-23Version:22
Title:DSA-2061 samba -- memory corruption
Description:Jun Mao discovered that Samba, an implementation of the SMB/CIFS protocol for Unix systems, is not properly handling certain offset values when processing chained SMB1 packets. This enables an unauthenticated attacker to write to an arbitrary memory location resulting in the possibility to execute arbitrary code with root privileges or to perform denial of service attacks by crashing the samba daemon.
Family:unixClass:patch
Status:ACCEPTEDReference(s):CVE-2010-2063
DSA-2061
Platform(s):Debian GNU/Linux 5.0
Product(s):samba
Definition Synopsis
  • Debian GNU/Linux 5.0 is installed
  • AND Architecture section
  • Architecture independent section
  • Installed architecture is all
  • AND Packages section
  • samba-doc is earlier than 2:3.2.5-4lenny12
  • OR samba-doc-pdf is earlier than 2:3.2.5-4lenny12
  • OR Architecture dependent section
  • Supported architectures section
  • Installed architecture is s390
  • OR Installed architecture is amd64
  • OR Installed architecture is sparc
  • OR Installed architecture is arm
  • OR Installed architecture is i386
  • OR Installed architecture is armel
  • OR Installed architecture is mips
  • OR Installed architecture is ia64
  • OR Installed architecture is alpha
  • OR Installed architecture is powerpc
  • OR Installed architecture is mipsel
  • OR Installed architecture is hppa
  • AND Packages section
  • smbfs is earlier than 2:3.2.5-4lenny12
  • OR samba is earlier than 2:3.2.5-4lenny12
  • OR swat is earlier than 2:3.2.5-4lenny12
  • OR samba-tools is earlier than 2:3.2.5-4lenny12
  • OR libsmbclient is earlier than 2:3.2.5-4lenny12
  • OR smbclient is earlier than 2:3.2.5-4lenny12
  • OR libwbclient0 is earlier than 2:3.2.5-4lenny12
  • OR winbind is earlier than 2:3.2.5-4lenny12
  • OR libpam-smbpass is earlier than 2:3.2.5-4lenny12
  • OR libsmbclient-dev is earlier than 2:3.2.5-4lenny12
  • OR samba-common is earlier than 2:3.2.5-4lenny12
  • OR samba-dbg is earlier than 2:3.2.5-4lenny12
  • BACK