PT-2003-1116 · Samba+2 · Samba-Swat+5

Sebastian Krahmer · Published 2003-03-18 · Updated 2021-03-25 · CVE-2003-0086

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Samba versions prior to 2.2.8 Samba-swat versions 2.0.10 and 2.2.7 Samba-client versions 2.0.10 and 2.2.7 Samba-common versions 2.0.10 and 2.2.7

Description The issue affects the Samba package in Red Hat Linux, allowing for remote exploitation that may lead to a breach of confidentiality, integrity, and availability of protected information. A race condition involving chown in the code for writing reg files in Samba before version 2.2.8 enables local users to overwrite arbitrary files.

Recommendations For Samba versions prior to 2.2.8, update to version 2.2.8 or later. For Samba-swat versions 2.0.10 and 2.2.7, update to a version later than 2.2.7. For Samba-client versions 2.0.10 and 2.2.7, update to a version later than 2.2.7. For Samba-common versions 2.0.10 and 2.2.7, update to a version later than 2.2.7. As a temporary workaround, consider restricting access to the vulnerable Samba packages until a patch is available.

Exploit

Fix

Related Identifiers

ALT-PU-2020-2443

ALT-PU-2020-2475

ALT-PU-2021-1547

BDU:2015-08214

BDU:2015-08215

BDU:2015-08216

BDU:2015-08217

BDU:2015-08218

BDU:2015-08219

BDU:2015-08220

BDU:2015-08221

CVE-2003-0086

DSA-262

Affected Products

Alt Linux

Red Hat

Samba

Samba-Client

Samba-Common

Samba-Swat

References · 58

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/freebsd/samba/trans2open.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/solaris/samba/trans2open.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/osx/samba/trans2open.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/samba/trans2open.rb · Exploit
• https://osv.dev/vulnerability/DEBIAN-CVE-2003-0086 · Vendor Advisory
• http://securityfocus.com/archive/1/316165/30/25370/threaded · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0086 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2003-0086 · Security Note
• http://securityfocus.com/bid/7107 · Vendor Advisory
• ftp://patches.sgi.com/support/free/security/advisories/20030302-01-I · Vendor Advisory
• http://novell.com/linux/security/advisories/2003_016_samba.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-07588 · Security Note
• http://mandriva.com/security/advisories?name=MDKSA-2003:032 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1154 · Security Note
• https://bdu.fstec.ru/vul/2015-04793 · Security Note