Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 524
Alerts This Week
Warning Icon 1 524

Ubuntu 14.04 LTS: USN-2305-1 Moderate: Samba Administrative Access

ubuntu
Calendar Grey August 1, 2014
Scroller Ubuntu
Uncover the Samba flaw that may enable administrator privileges through specially designed network packets. Patches for Ubuntu released.
Samba could be made to run programs as an administrator if it received specially crafted network traffic.

Summary

Samba could be made to run programs as an administrator if it received

specially crafted network traffic.

Software Description:

- samba: SMB/CIFS file, print, and login server for Unix

Details:

Volker Lendecke discovered that the Samba NetBIOS name service daemon

incorrectly handled certain memory operations. A remote attacker could use

this issue to execute arbitrary code as the root user.

Topics%20covered

Topics Covered

security advisory moderate samba Ubuntu administrative access

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 14.04 LTS:
  samba                           2:4.1.6+dfsg-1ubuntu2.14.04.3

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-2305-1

CVE-2014-3560

August 01, 2014

Topics%20covered

Topics Covered

security advisory moderate samba Ubuntu administrative access

Package Information

https://launchpad.net/ubuntu/+source/samba/2:4.1.6+dfsg-1ubuntu2.14.04.3

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.