Search:     Advanced search
server monitoring

Samba Multiple Remote Vulnerabilities

Article ID: 15705
Last updated: 27 Jan, 2009
Views: 444
Posted: 22 Jan, 2009
by: Tech Pubs S.
Updated: 27 Jan, 2009
by: Tech Pubs S.

Samba Multiple Remote Vulnerabilities

This script is Copyright (C) 2004 Tenable Network Security

FamilyDenial of Service
Plugin ID15705
Bugtraq ID11624
11678
CVE IDCVE-2004-0882
CVE-2004-0930

Description:

The remote Samba server, according to its version number, is vulnerable
to a remote Denial Of Service vulnerability and a remote buffer overflow.
The Wild Card DoS vulnerability may allow an attacker to make the remote
server consume excessive CPU cycles.
The QFILEPATHINFO Remote buffer overflow vulnerability may allow an attacker
to execute code on the server.

An attacker needs a valid account or enough credentials to exploit those
flaws.

Solution : upgrade to Samba 3.0.8
See also : http://us4.samba.org/samba/security/CAN-2004-0882.html
See also : http://us4.samba.org/samba/security/CAN-2004-0930.html
Risk factor : High
This article was:   Helpful | Not Helpful
Prev   Next
TYPSoft FTP 1.10     TCP/IP Land Attack Remote DoS