[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Vulnerability in Samba 2.2.10 and older

Subject: Re: Vulnerability in Samba 2.2.10 and older
From: Matthias Scheler <tron@NetBSD.org>
To: tech-pkg-ja@jp.NetBSD.org
Date: Tue, 31 Aug 2004 14:29:41 +0200
Message-ID: <20040831122941.GA8768@colwyn.zhadum.de>
In-Reply-To: <20040831.204459.32627944.taca@back-street.net>
References: <20040830133314.GB845@colwyn.zhadum.de> <20040830.234848.84977771.taca@back-street.net> <20040830163011.GB24991@colwyn.zhadum.de> <20040831.204459.32627944.taca@back-street.net>
Cc: Kimmo Suominen <kim@NetBSD.org>
Delivered-To: mailing list tech-pkg-ja@jp.netbsd.org
Mailing-List: contact tech-pkg-ja-help@jp.netbsd.org; run by ezmlm-idx
User-Agent: Mutt/1.4.2.1i

On Tue, Aug 31, 2004 at 08:44:59PM +0900, Takahiro Kambe wrote:
> > Probably not. I wasn't sure, and DoS seems like the minimum impact.
> remote-server-crash ?

That part is covered by "denial-of-service". The question is whether this
can be used to gain access. Reading the description again it doesn't
look like a buffer overflow but an uninitialized pointer problem on
the server. So it seems that "denial-of-service" is good enough.
We might even be able to remove that entry if we know for sure that
this bug doesn't crash the main Samba server process.

	Kind regards

-- 
Matthias Scheler                                  http://scheler.de/~matthias/

References:
- Re: Vulnerability in Samba 2.2.10 and older
  - From: Matthias Scheler <tron@NetBSD.org>
- Re: Vulnerability in Samba 2.2.10 and older
  - From: Takahiro Kambe <taca@back-street.net>
- Re: Vulnerability in Samba 2.2.10 and older
  - From: Matthias Scheler <tron@NetBSD.org>
- Re: Vulnerability in Samba 2.2.10 and older
  - From: Takahiro Kambe <taca@back-street.net>

Prev by Date: Re: Vulnerability in Samba 2.2.10 and older
Prev by thread: Re: Vulnerability in Samba 2.2.10 and older
Index(es):
- Date
- Thread