Web Browser 로는 FTP 접속이 불가능 합니다.

문서번호 : 1196678695
업데이트 : 2007.12.03


상세내용

Samba 는 유닉스와 윈도우즈간의 네트워크 통신을 위한 SMB 프로토콜
을 지원한다.

. Security fix

. CVE-2007-4138:
The Winbind nss_info extension (nsswitch/idmap_ad.c) in idmap_ad.so in Samba
3.0.25 through 3.0.25c, when the "winbind nss info" option is set to rfc2307
or sfu, grants all local users the privileges of gid 0 when the (1) RFC2307
or (2) Services for UNIX (SFU) primary group attribute is not defined.

. CVE-2007-4572:
Stack-based buffer overflow in nmbd in Samba 3.0.0 through 3.0.26a, when
configured as a Primary or Backup Domain controller, allows remote attackers
to have an unknown impact via crafted GETDC mailslot requests, related to
handling of GETDC logon server requests.

. CVE-2007-5398:
Stack-based buffer overflow in the reply_netbios_packet function in
nmbd/nmbd_packets.c in nmbd in Samba 3.0.0 through 3.0.26a, when operating as
a WINS server, allows remote attackers to execute arbitrary code via crafted
WINS Name Registration requests followed by a WINS Name Query request.


Autoupdates 지원 : Packages System
    pkgadd -F "samba*"


update 패키지

  RPMS :

    . samba-common-3.0.25b-6.1.i686.rpm
    . samba-3.0.25b-6.1.i686.rpm
    . samba-clients-3.0.25b-6.1.i686.rpm
    . samba-swat-3.0.25b-6.1.i686.rpm

  SRPMS :

    . samba-3.0.25b-6.1.src.rpm


참고 : 없음
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4138
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4572
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5398