samba: remote code execution [LWN.net]

Package(s):

samba

CVE #(s):

CVE-2010-3069

Created:

September 14, 2010

Updated:

November 11, 2010

Description:

The Samba server does not perform proper array boundary checking when parsing Windows security identifiers. A malicious client could exploit this vulnerability to run arbitrary code under the ID of the samba server.

Alerts:

Red Hat	RHSA-2010:0860-02	2010-11-10
openSUSE	openSUSE-SU-2010:0653-1	2010-09-23
openSUSE	openSUSE-SU-2010:0659-1	2010-09-23
openSUSE	openSUSE-SU-2010:0658-1	2010-09-23
Debian	DSA-2109-1	2010-09-16
CentOS	CESA-2010:0698	2010-09-15
CentOS	CESA-2010:0697	2010-09-15
CentOS	CESA-2010:0697	2010-09-15
CentOS	CESA-2010:0697	2010-09-15
Mandriva	MDVSA-2010:184	2010-09-16
Slackware	SSA:2010-257-01	2010-09-15
Red Hat	RHSA-2010:0698-01	2010-09-14
Red Hat	RHSA-2010:0697-01	2010-09-14
Fedora	FEDORA-2010-14627	2010-09-15
Fedora	FEDORA-2010-14678	2010-09-15
Ubuntu	USN-987-1	2010-09-14
rPath	rPSA-2010-0066-1	2010-10-17
SUSE	SUSE-SR:2010:019	2010-10-25
SUSE	SUSE-SR:2010:018	2010-10-06
Oracle	ELSA-2012-0313	2012-03-07
SUSE	SUSE-SU-2012:0348-1	2012-03-09
Gentoo	201206-22	2012-06-24

(Log in to post comments)