SecurityTracker.com
    Home    |    View Topics    |    Search    |    Contact Us    |   

SecurityTracker
Archives


 


Category:   Application (File Transfer/Sharing)  >   Samba Vendors:   Samba.org
Samba smbd Access Control Bug Lets Remote Authenticated Users Bypass Certain Access Controls
SecurityTracker Alert ID:  1022442
SecurityTracker URL:  http://securitytracker.com/id/1022442
CVE Reference:   CVE-2009-1888   (Links to External Site)
Date:  Jun 24 2009
Impact:   Modification of system information
Fix Available:  Yes  Vendor Confirmed:  Yes  
Version(s): 3.0.31 - 3.3.5
Description:   A vulnerability was reported in Samba smbd. A remote authenticated user can bypass certain access controls.

A remote authenticated user with write access to a file but without permission to modify the file's access control list (ACL) may be able to modify the ACL in a certain case. If the parameter "dos filemode" is set to "yes" in the 'smb.conf' file, the access control check reads uninitialized memory to determine access rights.

Jeremy Allison reported this vulnerability.

Impact:   A remote authenticated user can bypass certain access controls.
Solution:   The vendor has issued a fix (3.0.35, 3.2.13, and 3.3.6).

The vendor's advisory is available at:

http://samba.org/samba/security/CVE-2009-1888.html

Vendor URL:  samba.org/samba/security/CVE-2009-1888.html (Links to External Site)
Cause:   Access control error
Underlying OS:  Linux (Any), UNIX (Any)

Message History:   This archive entry has one or more follow-up message(s) listed below.
Sep 25 2009 (Sun Issues Fix) Samba smbd Access Control Bug Lets Remote Authenticated Users Bypass Certain Access Controls
Sun has issued a fix for Solaris 10 and OpenSolaris.
Oct 27 2009 (Red Hat Issues Fix) Samba smbd Access Control Bug Lets Remote Authenticated Users Bypass Certain Access Controls
Red Hat has released a fix for Red Hat Enterprise Linux 4 and 5.
Nov 16 2009 (Red Hat Issues Fix) Samba smbd Access Control Bug Lets Remote Authenticated Users Bypass Certain Access Controls
Red Hat has issued a fix for Red Hat Enterprise Linux 5 Supplementary.
Apr 2 2010 (VMware Issues Fix for ESX) Samba smbd Access Control Bug Lets Remote Authenticated Users Bypass Certain Access Controls
VMware has issued a fix for VMware ESX.



 Source Message Contents



[Original Message Not Available for Viewing]


Go to the Top of This SecurityTracker Archive Page





Home   |    View Topics   |    Search   |    Contact Us

This web site uses cookies for web analytics. Learn More

Copyright 2019, SecurityGlobal.net LLC