Skip to navigation

Security Advisory New samba packages available to fix potential security vulnerability

Advisory: RHSA-2002:266-05
Type: Security Advisory
Severity: N/A
Issued on: 2002-11-22
Last updated on: 2002-11-21
Affected Products: Red Hat Linux 7.3
Red Hat Linux 8.0
CVEs (cve.mitre.org): CVE-2002-1318

Details

New samba packages are available that fix a security vulnerability present
in samba versions 2.2.2 through 2.2.6. A potential attacker could gain
root access on the target machine. It is strongly encouraged that all Samba
users update to the fixed packages.

As of this time, there are no known exploits for this vulnerability.

There was a bug in the length checking for encrypted password change
requests from clients. A client could potentially send an encrypted
password, which, when decrypted with the old hashed password, could be
used as a buffer overrun attack on smbd's stack. The attack would
have to be crafted such that converting a DOS codepage string to little
endian UCS2 unicode would translate into an executable block of code.

Thanks to the Debian Samba maintainers for discovering this issue, and to
the Samba team for providing the fix (and the problem description text above.)


Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

To update all RPMs for your particular architecture, run:

rpm -Fvh [filenames]

where [filenames] is a list of the RPMs you wish to upgrade. Only those
RPMs which are currently installed will be updated. Those RPMs which are
not installed but included in the list will not be updated. Note that you
can also use wildcards (*.rpm) if your current directory *only* contains the
desired RPMs.

Please note that this update is also available via Red Hat Network. Many
people find this an easier way to apply updates. To use Red Hat Network,
launch the Red Hat Update Agent with the following command:

up2date

This will start an interactive process that will result in the appropriate
RPMs being upgraded on your system.

Updated packages

Red Hat Linux 7.3

SRPMS:
samba-2.2.7-1.7.3.src.rpm
File outdated by:  RHSA-2003:137
    MD5: 5c8ba729bb3e6d2f0614fd543053e6e9
 
IA-32:
samba-2.2.7-1.7.3.i386.rpm
File outdated by:  RHSA-2003:137
    MD5: 92178f0aa6c7ec0cb2b55c0f32c59ca4
samba-client-2.2.7-1.7.3.i386.rpm
File outdated by:  RHSA-2003:137
    MD5: 6915d467d9572737dfbfcac916734084
samba-common-2.2.7-1.7.3.i386.rpm
File outdated by:  RHSA-2003:137
    MD5: 56ce43d49614bf5a79b90dfbd4a77235
samba-swat-2.2.7-1.7.3.i386.rpm
File outdated by:  RHSA-2003:137
    MD5: 82cbcb8e2c3be661e0e6c1c7f9856ecd
 
Red Hat Linux 8.0

SRPMS:
samba-2.2.7-2.src.rpm
File outdated by:  RHSA-2003:137
    MD5: 9b5ded05dc9cc2c49c40b686ec78caf7
 
IA-32:
samba-2.2.7-2.i386.rpm
File outdated by:  RHSA-2003:137
    MD5: 4e2339d23bad01690938748d84dac186
samba-client-2.2.7-2.i386.rpm
File outdated by:  RHSA-2003:137
    MD5: a7a48f9d6d8e45966172ae1b941e0208
samba-common-2.2.7-2.i386.rpm
File outdated by:  RHSA-2003:137
    MD5: 3bd309562e0cdefc8d4cd5b02ee0b71c
samba-swat-2.2.7-2.i386.rpm
File outdated by:  RHSA-2003:137
    MD5: 0efdfc0d8de8294c0dd4978a82d15991
 

References


Keywords

change, encrypted, password, samba, security


These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from:
https://www.redhat.com/security/team/key/#package

The Red Hat security contact is secalert@redhat.com. More contact details at http://www.redhat.com/security/team/contact/