PT-2003-1116 · Samba+2 · Samba-Swat+5

Sebastian Krahmer · Publicado 2003-03-18 · Atualizado 2021-03-25 · CVE-2003-0086

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Samba versions prior to 2.2.8 Samba-swat versions 2.0.10 and 2.2.7 Samba-client versions 2.0.10 and 2.2.7 Samba-common versions 2.0.10 and 2.2.7

Description The issue affects the Samba package in Red Hat Linux, allowing for remote exploitation that may lead to a breach of confidentiality, integrity, and availability of protected information. A race condition involving chown in the code for writing reg files in Samba before version 2.2.8 enables local users to overwrite arbitrary files.

Recommendations For Samba versions prior to 2.2.8, update to version 2.2.8 or later. For Samba-swat versions 2.0.10 and 2.2.7, update to a version later than 2.2.7. For Samba-client versions 2.0.10 and 2.2.7, update to a version later than 2.2.7. For Samba-common versions 2.0.10 and 2.2.7, update to a version later than 2.2.7. As a temporary workaround, consider restricting access to the vulnerable Samba packages until a patch is available.

Exploit

Correção

Identificadores relacionados

ALT-PU-2020-2443

ALT-PU-2020-2475

ALT-PU-2021-1547

BDU:2015-08214

BDU:2015-08215

BDU:2015-08216

BDU:2015-08217

BDU:2015-08218

BDU:2015-08219

BDU:2015-08220

BDU:2015-08221

CVE-2003-0086

DSA-262

Produtos afetados

Alt Linux

Red Hat

Samba

Samba-Client

Samba-Common

Samba-Swat

Referências · 58

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/freebsd/samba/trans2open.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/solaris/samba/trans2open.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/osx/samba/trans2open.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/samba/trans2open.rb · Exploit
• https://osv.dev/vulnerability/DEBIAN-CVE-2003-0086 · Aviso do Fabricante
• http://marc.info/?l=bugtraq&m=104792646416629&w=2 · Nota
• http://securityfocus.com/archive/1/316165/30/25370/threaded · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0086 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2003-0086 · Nota de Segurança
• http://securityfocus.com/bid/7107 · Aviso do Fabricante
• ftp://patches.sgi.com/support/free/security/advisories/20030302-01-I · Aviso do Fabricante
• http://secunia.com/advisories/8303 · Nota
• http://novell.com/linux/security/advisories/2003_016_samba.html · Aviso do Fabricante
• http://securityfocus.com/bid/2928 · Nota
• https://bdu.fstec.ru/vul/2015-07588 · Nota de Segurança