|
|
| |
|
| |
samba: multiple vulnerabilities
| Package(s): | samba |
CVE #(s): | CVE-2010-1635
CVE-2010-1642
|
| Created: | July 27, 2010 |
Updated: | July 27, 2010 |
| Description: |
From the Mandriva advisory:
The chain_reply function in process.c in smbd in Samba before 3.4.8 and
3.5.x before 3.5.2 allows remote attackers to cause a denial of service
(NULL pointer dereference and process crash) via a Negotiate Protocol
request with a certain 0x0003 field value followed by a Session Setup
AndX request with a certain 0x8003 field value (CVE-2010-1635).
The reply_sesssetup_and_X_spnego function in sesssetup.c in smbd in
Samba before 3.4.8 and 3.5.x before 3.5.2 allows remote attackers to
trigger an out-of-bounds read, and cause a denial of service (process
crash), via a \xff\xff security blob length in a Session Setup AndX
request (CVE-2010-1642).
|
| Alerts: |
|
( Log in to post comments)
|
|
|