Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -7 articles for you...
91
security advisorydenial of servicegentooGentoo: GLSA-200409-14 Normal: Samba Remote Printing Denial of Service
Samba is vulnerable to a remote denial of service attack due to out of sequence print change notification requests.. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200409-14 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Normal Title: Samba: Remote printing vulnerability Date: September 09, 2004 Bugs: #62476 ID: 200409-14 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======= Samba is vulnerable to a remote denial of service attack due to out of sequence print change notification requests. Background ========= Samba is a freely available SMB/CIFS implementation which allows seamless interoperability of file and print services to other SMB/CIFS clients. Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 net-fs/samba < 3.0.6 > = 3.0.6 Description ========== Due to a bug in the printer_notify_info() function, authorized userscould potentially crash the Samba server by sending improperly handled print change notification requests in an invalid order. Windows XP SP2 clients can trigger this behavior by sending a FindNextPrintChangeNotify() request before previously sending a FindFirstPrintChangeNotify() request. Impact ===== A remote authorized user could potentially crash a Samba server after issuing these out of sequence requests. Workaround ========= There is no known workaround at this time. Resolution ========= All Samba users shouldupgrade to the latest version: # emerge sync # emerge -pv "> =net-fs/samba-3.0.6" # emerge "> =net-fs/samba-3.0.6" References ========= [ 1 ] Samba Release Notes [ 2 ] BugTraq Advisory Availability =========== This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/200409-14 Concerns? ======== Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users machines is of utmost importance to us. Any security concerns should be addressed to
Sep 09, 2004
Gentoo
98
security advisoryRed HatlprRed Hat: RHSA-1999:041-03 Moderate: Lpr File Access Problem
There are potential problems with file access checking in the lpr and lpd programs. These could allow users to potentially print files they do not have access to. Also, there are bugs in remote printing in the lpd that shipped with Red Hat Linux 6.1. . Red Hat, Inc. Security Advisory Package lpr Synopsis File access problems in lpr/lpd Advisory ID RHSA-1999:041-03 Issue Date 1999-10-17 Updated on 1999-10-25 Keywords lpr lpd permissions Cross references N/A Revision History: 1999-10-25: New packages, to fix problems introduced by the security fix. 1999-10-19: New packages, to fix a remote printing bug. Add note about local printing fix for Red Hat Linux 6.1. 1. Topic: There are potential problems with file access checking in the lpr and lpd programs. These could allow users to potentially print files they do not have access to. Also, there are bugs in remote printing in the lpd that shipped with Red Hat Linux 6.1. 2. Problem description: There are two problems in the lpr and lpd programs. By exploiting a race between the access check and the actual file opening, it is potentially possible to have lpr read a file as root that the user does not have access to. Also, the lpd program would blindly open queue files as root; by use of the '-s' flag to lpr, it was possible to have lpd print files that the user could not access. Thanks go to Tymm Twillman for pointing out these vulnerabilities. (1999-10-19) Another problem with remote printing was fixed in lpr-0.44. If you are experiencing problems with remote printing in the previous errata update, it is recommended that you upgrade. There are no known security issues with the previous errata packages. If you are experiencing problems with local printingin Red Hat Linux 6.1, make sure that you have: alias parport_lowlevel parport_pc in your /etc/conf.modules file. (1999-10-25) The original security patch broke some aspects of printing. New errata RPMs are available which should fix the problem. 3. Bug IDs fixed: (see bugzilla for more information) 5122 5540 5697 5832 5835 5903 5949 4. Relevant releases/architectures: Red Hat Linux 6.1, all architectures 5. Obsoleted by: None 6. Conflicts with: None 7. RPMs required: Intel: lpr-0.46- 1.i386.rpm Alpha: lpr-0.46- 1.alpha.rpm SPARC: lpr-0.46- 1.sparc.rpm Source: lpr-0.46- 1.src.rpm Architecture neutral: 8. Solution: For each RPM for your particular architecture, run: rpm -Uvh filename where filename is the name of the RPM. 9. Verification: MD5 sum Package Name ------------------------------------------------------------------------- 03c996550636cbe4ca0a9fc853f969b6 lpr-0.46-1.src.rpm 30089f82ecf8e8a89565c5bba361697d lpr-0.46-1.alpha.rpm a01c0b9278c2c9ffb4bb6450703fc124 lpr-0.46-1.i386.rpm 41a1ef221a15446ed46b54092d7c14ca lpr-0.46-1.sparc.rpm These packages are GPG signed by Red Hat Inc. for security. Our key is available at: You can verify each package with the following command: rpm --checksig filename If you only wish to verify that each package has not been corrupted or tampered with, examine only the md5sum with the following command: rpm --checksig --nogpg filename 10. References: . Concerns regarding file accessibility in lpr/lpd highlighted by Red Hat, crucial for safeguarding print functionalities. Bulletin RHSA-1999:041-03.. Red Hat Advisory, Lpr Security, File Access Issues, Remote Printing Flaws. . LinuxSecurity.com Team
Dec 07, 1999
Red Hat
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!