samba: incorrect group assignment [LWN.net]

Package(s):

samba

CVE #(s):

CVE-2007-4138

Created:

September 12, 2007

Updated:

November 15, 2007

Description:

From the Samba advisory: When the rfc2307 or sfu nss_info plugin has been enabled, in the absence of either the RFC2307 or SFU primary group attribute, Winbind will assign a primary group ID of 0 to the domain user queried using the getpwnam() C library call.

Alerts:

Red Hat	RHSA-2007:1017-01	2007-11-15
Red Hat	RHSA-2007:1016-01	2007-11-15
rPath	rPSA-2007-0184-1	2007-09-14
Slackware	SSA:2007-255-02	2007-09-13
Fedora	FEDORA-2007-2145	2007-09-12

(Log in to post comments)

samba: incorrect group assignment

Posted Sep 21, 2007 15:09 UTC (Fri) by kreutzm (guest, #4700) [Link]

Debian Sarge and Etch are not vulnerable.