OSVDB ID: 6323

Title: Samba smbd SMB/CIFS Packet Fragment Reassembly Remote Overflow

Info

Disclosure
Jul 27, 2003

Discovery
Unknown

Dates

Exploit
Jul 27, 2003

Solution
Unknown

Description

 A remote buffer overflow exists in Samba. The service fails to check a field length inside of the request before using this length in a memcpy() operation, resulting in a buffer overflow. With a specially crafted request, an attacker can cause arbitrary code to be executed with super-user privileges, resulting in a loss of confidentiality and integrity.

Classification

 Location: Remote / Network Access
Attack Type: Input Manipulation
Impact: Loss of Confidentiality, Loss of Integrity
Exploit: Exploit Public
Disclosure: OSVDB Verified

Solution

 Upgrade to version 2.2.8 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Products

Samba Project

Samba

 2.0
2.2.0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7

References

Credit
  • Sebastian Krahmer - krahmersuse.de - SuSE


Direct URL: http://osvdb.org/36218