Issued:
2007-02-15
Updated:
2007-02-15

RHSA-2007:0060 - Security Advisory

Synopsis

Moderate: samba security update

Type/Severity

Security Advisory: Moderate

Topic

Updated samba packages that fix a denial of service vulnerability are now
available.

This update has been rated as having important security impact by the Red
Hat Security Response Team.

Description

Samba provides file and printer sharing services to SMB/CIFS clients.

A denial of service flaw was found in Samba's smbd daemon process. An
authenticated user could send a specially crafted request which would cause
a smbd child process to enter an infinite loop condition. By opening
multiple CIFS sessions, an attacker could exhaust system resources.
(CVE-2007-0452)

Users of Samba should update to these packages, which contain a
backported patch to correct this issue.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

This update is available via Red Hat Network. To use Red Hat Network,
launch the Red Hat Update Agent with the following command:

up2date

This will start an interactive process that will result in the appropriate
RPMs being upgraded on your system.

Affected Products

  • Red Hat Enterprise Linux Server 4 x86_64
  • Red Hat Enterprise Linux Server 4 ia64
  • Red Hat Enterprise Linux Server 4 i386
  • Red Hat Enterprise Linux Server 3 x86_64
  • Red Hat Enterprise Linux Server 3 ia64
  • Red Hat Enterprise Linux Server 3 i386
  • Red Hat Enterprise Linux Workstation 4 x86_64
  • Red Hat Enterprise Linux Workstation 4 ia64
  • Red Hat Enterprise Linux Workstation 4 i386
  • Red Hat Enterprise Linux Workstation 3 x86_64
  • Red Hat Enterprise Linux Workstation 3 ia64
  • Red Hat Enterprise Linux Workstation 3 i386
  • Red Hat Enterprise Linux Desktop 4 x86_64
  • Red Hat Enterprise Linux Desktop 4 i386
  • Red Hat Enterprise Linux Desktop 3 x86_64
  • Red Hat Enterprise Linux Desktop 3 i386
  • Red Hat Enterprise Linux for IBM z Systems 4 s390x
  • Red Hat Enterprise Linux for IBM z Systems 4 s390
  • Red Hat Enterprise Linux for IBM z Systems 3 s390x
  • Red Hat Enterprise Linux for IBM z Systems 3 s390
  • Red Hat Enterprise Linux for Power, big endian 4 ppc
  • Red Hat Enterprise Linux for Power, big endian 3 ppc

Fixes

  • BZ - 225513 - CVE-2007-0452 Samba smbd denial of service

CVEs

References

Red Hat Enterprise Linux Server 4

SRPM
samba-3.0.10-1.4E.11.src.rpm SHA-256: 0d8936a7aa8de89c6aa7b6cfd3ab6f34789349784b00459b984e1099b9fa45df
x86_64
samba-3.0.10-1.4E.11.x86_64.rpm SHA-256: 880b498be607a86cc92fcc53ea64d361ba238f4c32c84797123dd84eeec23865
samba-3.0.10-1.4E.11.x86_64.rpm SHA-256: 880b498be607a86cc92fcc53ea64d361ba238f4c32c84797123dd84eeec23865
samba-client-3.0.10-1.4E.11.x86_64.rpm SHA-256: 82379b4db35ff98f534f01c11ca9163d90cd3367683befbefaa18674d505ea04
samba-client-3.0.10-1.4E.11.x86_64.rpm SHA-256: 82379b4db35ff98f534f01c11ca9163d90cd3367683befbefaa18674d505ea04
samba-common-3.0.10-1.4E.11.i386.rpm SHA-256: 3ca7867cd159999ab48b3ab36d3334d8a6ba145fb2c6035ce447289a82b93f88
samba-common-3.0.10-1.4E.11.i386.rpm SHA-256: 3ca7867cd159999ab48b3ab36d3334d8a6ba145fb2c6035ce447289a82b93f88
samba-common-3.0.10-1.4E.11.x86_64.rpm SHA-256: b6de3b4109cf5cb92a8a7c774c1756c29195b5613578848dcc4e9b9b0b6eaead
samba-common-3.0.10-1.4E.11.x86_64.rpm SHA-256: b6de3b4109cf5cb92a8a7c774c1756c29195b5613578848dcc4e9b9b0b6eaead
samba-swat-3.0.10-1.4E.11.x86_64.rpm SHA-256: e2cb9dfd67a78ee5dea896511497fad99bee9fa43bd305f94da2274e24d60c53
samba-swat-3.0.10-1.4E.11.x86_64.rpm SHA-256: e2cb9dfd67a78ee5dea896511497fad99bee9fa43bd305f94da2274e24d60c53
ia64
samba-3.0.10-1.4E.11.ia64.rpm SHA-256: 5794dcbd60ed976250973fc5a0615d166058232925cf81d3f56a9bc8d8ee0547
samba-3.0.10-1.4E.11.ia64.rpm SHA-256: 5794dcbd60ed976250973fc5a0615d166058232925cf81d3f56a9bc8d8ee0547
samba-client-3.0.10-1.4E.11.ia64.rpm SHA-256: b73d91351098499d13eccdef390aef6f5bc5ec27b461b33dc9a688d3df84de73
samba-client-3.0.10-1.4E.11.ia64.rpm SHA-256: b73d91351098499d13eccdef390aef6f5bc5ec27b461b33dc9a688d3df84de73
samba-common-3.0.10-1.4E.11.i386.rpm SHA-256: 3ca7867cd159999ab48b3ab36d3334d8a6ba145fb2c6035ce447289a82b93f88
samba-common-3.0.10-1.4E.11.i386.rpm SHA-256: 3ca7867cd159999ab48b3ab36d3334d8a6ba145fb2c6035ce447289a82b93f88
samba-common-3.0.10-1.4E.11.ia64.rpm SHA-256: 2e3be046df733ca5acb627368160d69ec5eb282cd96ebdb5b310a29667770a9f
samba-common-3.0.10-1.4E.11.ia64.rpm SHA-256: 2e3be046df733ca5acb627368160d69ec5eb282cd96ebdb5b310a29667770a9f
samba-swat-3.0.10-1.4E.11.ia64.rpm SHA-256: f0a364fce4846075843f4ec4e04feff01cdaebf43ef367611d6d6db207699c54
samba-swat-3.0.10-1.4E.11.ia64.rpm SHA-256: f0a364fce4846075843f4ec4e04feff01cdaebf43ef367611d6d6db207699c54
i386
samba-3.0.10-1.4E.11.i386.rpm SHA-256: 9b42b470a504a1f46550e55d5449cae8a938ad4791ffa6677c46ce90f4ed856a
samba-3.0.10-1.4E.11.i386.rpm SHA-256: 9b42b470a504a1f46550e55d5449cae8a938ad4791ffa6677c46ce90f4ed856a
samba-client-3.0.10-1.4E.11.i386.rpm SHA-256: ae985f019b81f9a5440a0fe9c875bd08395a427ace11dd90dda4ce0e866ffaea
samba-client-3.0.10-1.4E.11.i386.rpm SHA-256: ae985f019b81f9a5440a0fe9c875bd08395a427ace11dd90dda4ce0e866ffaea
samba-common-3.0.10-1.4E.11.i386.rpm SHA-256: 3ca7867cd159999ab48b3ab36d3334d8a6ba145fb2c6035ce447289a82b93f88
samba-common-3.0.10-1.4E.11.i386.rpm SHA-256: 3ca7867cd159999ab48b3ab36d3334d8a6ba145fb2c6035ce447289a82b93f88
samba-swat-3.0.10-1.4E.11.i386.rpm SHA-256: e6e75a88aa7b4fa6855e608343df608c4142861b6d768d214fe771c6f51879d1
samba-swat-3.0.10-1.4E.11.i386.rpm SHA-256: e6e75a88aa7b4fa6855e608343df608c4142861b6d768d214fe771c6f51879d1

Red Hat Enterprise Linux Workstation 4

SRPM
samba-3.0.10-1.4E.11.src.rpm SHA-256: 0d8936a7aa8de89c6aa7b6cfd3ab6f34789349784b00459b984e1099b9fa45df
x86_64
samba-3.0.10-1.4E.11.x86_64.rpm SHA-256: 880b498be607a86cc92fcc53ea64d361ba238f4c32c84797123dd84eeec23865
samba-client-3.0.10-1.4E.11.x86_64.rpm SHA-256: 82379b4db35ff98f534f01c11ca9163d90cd3367683befbefaa18674d505ea04
samba-common-3.0.10-1.4E.11.i386.rpm SHA-256: 3ca7867cd159999ab48b3ab36d3334d8a6ba145fb2c6035ce447289a82b93f88
samba-common-3.0.10-1.4E.11.x86_64.rpm SHA-256: b6de3b4109cf5cb92a8a7c774c1756c29195b5613578848dcc4e9b9b0b6eaead
samba-swat-3.0.10-1.4E.11.x86_64.rpm SHA-256: e2cb9dfd67a78ee5dea896511497fad99bee9fa43bd305f94da2274e24d60c53
ia64
samba-3.0.10-1.4E.11.ia64.rpm SHA-256: 5794dcbd60ed976250973fc5a0615d166058232925cf81d3f56a9bc8d8ee0547
samba-client-3.0.10-1.4E.11.ia64.rpm SHA-256: b73d91351098499d13eccdef390aef6f5bc5ec27b461b33dc9a688d3df84de73
samba-common-3.0.10-1.4E.11.i386.rpm SHA-256: 3ca7867cd159999ab48b3ab36d3334d8a6ba145fb2c6035ce447289a82b93f88
samba-common-3.0.10-1.4E.11.ia64.rpm SHA-256: 2e3be046df733ca5acb627368160d69ec5eb282cd96ebdb5b310a29667770a9f
samba-swat-3.0.10-1.4E.11.ia64.rpm SHA-256: f0a364fce4846075843f4ec4e04feff01cdaebf43ef367611d6d6db207699c54
i386
samba-3.0.10-1.4E.11.i386.rpm SHA-256: 9b42b470a504a1f46550e55d5449cae8a938ad4791ffa6677c46ce90f4ed856a
samba-client-3.0.10-1.4E.11.i386.rpm SHA-256: ae985f019b81f9a5440a0fe9c875bd08395a427ace11dd90dda4ce0e866ffaea
samba-common-3.0.10-1.4E.11.i386.rpm SHA-256: 3ca7867cd159999ab48b3ab36d3334d8a6ba145fb2c6035ce447289a82b93f88
samba-swat-3.0.10-1.4E.11.i386.rpm SHA-256: e6e75a88aa7b4fa6855e608343df608c4142861b6d768d214fe771c6f51879d1

Red Hat Enterprise Linux Desktop 4

SRPM
samba-3.0.10-1.4E.11.src.rpm SHA-256: 0d8936a7aa8de89c6aa7b6cfd3ab6f34789349784b00459b984e1099b9fa45df
x86_64
samba-3.0.10-1.4E.11.x86_64.rpm SHA-256: 880b498be607a86cc92fcc53ea64d361ba238f4c32c84797123dd84eeec23865
samba-client-3.0.10-1.4E.11.x86_64.rpm SHA-256: 82379b4db35ff98f534f01c11ca9163d90cd3367683befbefaa18674d505ea04
samba-common-3.0.10-1.4E.11.i386.rpm SHA-256: 3ca7867cd159999ab48b3ab36d3334d8a6ba145fb2c6035ce447289a82b93f88
samba-common-3.0.10-1.4E.11.x86_64.rpm SHA-256: b6de3b4109cf5cb92a8a7c774c1756c29195b5613578848dcc4e9b9b0b6eaead
samba-swat-3.0.10-1.4E.11.x86_64.rpm SHA-256: e2cb9dfd67a78ee5dea896511497fad99bee9fa43bd305f94da2274e24d60c53
i386
samba-3.0.10-1.4E.11.i386.rpm SHA-256: 9b42b470a504a1f46550e55d5449cae8a938ad4791ffa6677c46ce90f4ed856a
samba-client-3.0.10-1.4E.11.i386.rpm SHA-256: ae985f019b81f9a5440a0fe9c875bd08395a427ace11dd90dda4ce0e866ffaea
samba-common-3.0.10-1.4E.11.i386.rpm SHA-256: 3ca7867cd159999ab48b3ab36d3334d8a6ba145fb2c6035ce447289a82b93f88
samba-swat-3.0.10-1.4E.11.i386.rpm SHA-256: e6e75a88aa7b4fa6855e608343df608c4142861b6d768d214fe771c6f51879d1

Red Hat Enterprise Linux for IBM z Systems 4

SRPM
samba-3.0.10-1.4E.11.src.rpm SHA-256: 0d8936a7aa8de89c6aa7b6cfd3ab6f34789349784b00459b984e1099b9fa45df
s390x
samba-3.0.10-1.4E.11.s390x.rpm SHA-256: f8b7099fff8e691fe3b7a3fe38e264fddcbf9f409184a08de9c27a2a368efc1c
samba-client-3.0.10-1.4E.11.s390x.rpm SHA-256: 2a307661f30c3fe58159656237a7aa93cab45b85b79a8cdc8d15b178dc42f534
samba-common-3.0.10-1.4E.11.s390.rpm SHA-256: 274fd85e665236a7172cea9eff35e4bdb45d2dc9c7c9ee61cb2f129068d7eb54
samba-common-3.0.10-1.4E.11.s390x.rpm SHA-256: 4e7ffcea2806f4087f5912de61337e5500d58d51298b3f52eed44800e4e43303
samba-swat-3.0.10-1.4E.11.s390x.rpm SHA-256: 0bda20a672bd642d95eef0a732c8f9b1f9a4354c770cce2838e9966df42a5527
s390
samba-3.0.10-1.4E.11.s390.rpm SHA-256: 0bcafa5533011acbacc916438f67852595766b642ed2d1313b2d65601fbfda7f
samba-client-3.0.10-1.4E.11.s390.rpm SHA-256: 0d6d81fa29dfd4b19a4373bb3f7b89af442dbc704abb683af5a0c32f95380fa2
samba-common-3.0.10-1.4E.11.s390.rpm SHA-256: 274fd85e665236a7172cea9eff35e4bdb45d2dc9c7c9ee61cb2f129068d7eb54
samba-swat-3.0.10-1.4E.11.s390.rpm SHA-256: 212f9194c7aabb91918a01127bf8c7c2343ed727ba8e1b512379aa557a0f45eb

Red Hat Enterprise Linux for Power, big endian 4

SRPM
samba-3.0.10-1.4E.11.src.rpm SHA-256: 0d8936a7aa8de89c6aa7b6cfd3ab6f34789349784b00459b984e1099b9fa45df
ppc
samba-3.0.10-1.4E.11.ppc.rpm SHA-256: 2b92b74ef09adc75ac8f1882b41693679ac4bd1033586092718edb29e354460a
samba-client-3.0.10-1.4E.11.ppc.rpm SHA-256: 7d7e7e32d60b12b2f654e43ef7aabd51c9f5cd67fbb0897f9cfef39c40f03089
samba-common-3.0.10-1.4E.11.ppc.rpm SHA-256: 8cd9372ee1e8c440e5cd9dcedfdb509b48ea665bec2041ec010cffc88f39521b
samba-common-3.0.10-1.4E.11.ppc64.rpm SHA-256: aea25194c1ce9aa026eaec845f5c50b2b17a020f6601d9a0427112f2fec4eecd
samba-swat-3.0.10-1.4E.11.ppc.rpm SHA-256: 76d566386ce16ee5f32b79e1988b9f05266be7c1838b4706dfa9f79efe142776

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.