SecurityTracker.com
    Home    |    View Topics    |    Search    |    Contact Us    |   

SecurityTracker
Archives


 


Category:   Application (File Transfer/Sharing)  >   Samba Vendors:   Samba.org
Samba smbd Memory Free Error Lets Remote Users Execute Arbitrary Code with Root Privileges
SecurityTracker Alert ID:  1031783
SecurityTracker URL:  http://securitytracker.com/id/1031783
CVE Reference:   CVE-2015-0240   (Links to External Site)
Date:  Feb 23 2015
Impact:   Execution of arbitrary code via network, Root access via network
Fix Available:  Yes  Vendor Confirmed:  Yes  
Version(s): 3.5.0 to 4.2.0rc4
Description:   A vulnerability was reported in Samba. A remote user can execute arbitrary code on the target system.

A remote user can send specially crafted data followed by an anonymous netlogon packet to trigger an uninitialized memory error and execute arbitrary code on the target system. The code will run with root privileges.

Richard van Eeden of Microsoft Vulnerability Research reported this vulnerability.

Impact:   A remote user can execute arbitrary code with root privileges on the target system.
Solution:   The vendor has issued a fix (3.6.25, 4.0.25, 4.1.17, 4.2.0rc5).

The vendor's advisory is available at:

https://www.samba.org/samba/security/CVE-2015-0240

Vendor URL:  www.samba.org/samba/security/CVE-2015-0240 (Links to External Site)
Cause:   Access control error
Underlying OS:  Linux (Any), UNIX (Any)

Message History:   This archive entry has one or more follow-up message(s) listed below.
Feb 23 2015 (Ubuntu Issues Fix) Samba smbd Memory Free Error Lets Remote Users Execute Arbitrary Code with Root Privileges
Ubuntu has issued a fix for Ubuntu 12.04 LTS, 14.04 LTS, and 14.10.
Feb 23 2015 (Red Hat Issues Fix) Samba smbd Memory Free Error Lets Remote Users Execute Arbitrary Code with Root Privileges
Red Hat has issued a fix for Red Hat Enterprise Linux 5, 5.6, 5.9, 6, 6.2, 6.4, 6.5, and 7.
Mar 12 2015 (HP Issues Fix for HP NonStop Server) Samba smbd Memory Free Error Lets Remote Users Execute Arbitrary Code with Root Privileges
HP has issued a fix for HP NonStop Server.
Apr 18 2015 (HP Issues Advisory for HP Systems Insight Manager) Samba smbd Memory Free Error Lets Remote Users Execute Arbitrary Code with Root Privileges
HP has issued an advisory for HP Systems Insight Manager.
Apr 29 2015 (HP Issues Fix for HP-UX) Samba smbd Memory Free Error Lets Remote Users Execute Arbitrary Code with Root Privileges
HP has issued a fix for HP-UX 11.31.



 Source Message Contents



[Original Message Not Available for Viewing]


Go to the Top of This SecurityTracker Archive Page





Home   |    View Topics   |    Search   |    Contact Us

This web site uses cookies for web analytics. Learn More

Copyright 2020, SecurityGlobal.net LLC