samba privilege escalation [LWN.net]

Package(s):

samba

CVE #(s):

CAN-2004-0186

Created:

March 15, 2004

Updated:

April 20, 2004

Description:

Samba, a LanManager-like file and printer server for Unix, was found to contain a vulnerability whereby a local user could use the "smbmnt" utility, which is setuid root, to mount a file share from a remote server which contained setuid programs under the control of the user. These programs could then be executed to gain privileges on the local system.

Alerts:

Mandrake	MDKSA-2004:035	2004-04-19
Debian	DSA-463-1	2004-03-12

(Log in to post comments)