Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 477
Alerts This Week
Warning Icon 1 477

Ubuntu 10.04 LTS USN-1226-1 Moderate Samba Denial Of Service

ubuntu
Calendar Grey October 4, 2011
Scroller Ubuntu
Debian Security Advisory DSA-1234-1 tackles vulnerabilities in Apache that could lead to system crashes. Ensure your system is patched!
An attacker could trick Samba into corrupting the system mtab file.

Summary

An attacker could trick Samba into corrupting the system mtab file.

Software Description:

- samba: SMB/CIFS file, print, and login server for Unix

Details:

Dan Rosenberg discovered that Samba incorrectly handled changes to the mtab

file. A local attacker could use this issue to corrupt the mtab file,

possibly leading to a denial of service. (CVE-2011-1678)

Jan Lieskovsky discovered that Samba incorrectly filtered certain strings

being added to the mtab file. A local attacker could use this issue to

corrupt the mtab file, possibly leading to a denial of service. This issue

only affected Ubuntu 10.04 LTS. (CVE-2011-2724)

Dan Rosenberg discovered that Samba incorrectly handled the mtab lock file.

A local attacker could use this issue to create a stale lock file, possibly

leading to a denial of service. (CVE-2011-3585)

Topics%20covered

Topics Covered

security advisory denial of service samba ubuntu system corruption

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 10.04 LTS:
  smbfs                           2:3.4.7~dfsg-1ubuntu3.8

Ubuntu 8.04 LTS:
  smbfs                           3.0.28a-1ubuntu4.16

In general, a standard system update will make all the necessary changes.

References

CVE-2011-1678, CVE-2011-2724, CVE-2011-3585

Severity
important
Lowest
Low
Medium
High
Critical

October 04, 2011

Topics%20covered

Topics Covered

security advisory denial of service samba ubuntu system corruption

Package Information

https://launchpad.net/ubuntu/+source/samba/2:3.4.7~dfsg-1ubuntu3.8
https://launchpad.net/ubuntu/+source/samba/3.0.28a-1ubuntu4.16

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.