OpenPKG Security Advisory

Publisher Name:          OpenPKG GmbH
Publisher Home:          http://openpkg.com/

Advisory Id (public):    OpenPKG-SA-2003.021
Advisory Type:           OpenPKG Security Advisory (SA)
Advisory Directory:      http://openpkg.com/go/OpenPKG-SA
Advisory Document:       http://openpkg.com/go/OpenPKG-SA-2003.021
Advisory Published:      2010-03-11 14:01 UTC

Issue Id (internal):     OpenPKG-SI-20030318.03
Issue First Created:     2003-03-18
Issue Last Modified:     2006-11-28
Issue Revision:          06


Subject Name:            Samba
Subject Summary:         SMB/CIFS Server
Subject Home:            http://www.samba.org/
Subject Versions:        * <= 2.2.7a

Vulnerability Id:        CVE-2003-0085, CVE-2003-0086
Vulnerability Scope:     global (not OpenPKG specific)

Attack Feasibility:      run-time
Attack Vector:           local system, remote network
Attack Impact:           privilege escalation

Description:
    Sebastian Krahmer, SuSE Security Team, [0] has alerted the Samba Team
    to two serious vulnerabilities in all versions of Samba [1] up to and
    including version 2.2.7a. We have backported the security relevant
    pieces of the 2.2.8 vendor changes into releases used by OpenPKG.
    
    If exploited correctly, it could lead to an anonymous user gaining
    root access on a Samba serving system. All versions of Samba up to
    and including Samba 2.2.7a are vulnerable.
    
    In addition he pointed out a chown(2) race condition which could
    allow overwriting of critical system files if exploited.
    CVE-2003-0086

References:
    [0] http://www.suse.de/de/security/
    [1] http://www.samba.org/
    [2] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0085
    [3] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0086
    [4] http://www.openpkg.org/tutorial.html#regular-source
    [5] http://www.openpkg.org/tutorial.html#regular-binary
    [6] ftp://ftp.openpkg.org/release/1.1/UPD/samba-2.2.5-1.1.2.src.rpm
    [7] ftp://ftp.openpkg.org/release/1.2/UPD/samba-2.2.7a-1.2.1.src.rpm
    [8] ftp://ftp.openpkg.org/release/1.1/UPD/
    [9] ftp://ftp.openpkg.org/release/1.2/UPD/
    [10] http://www.openpkg.org/security.html#signature


Primary Package Name:    samba
Primary Package Home:    http://openpkg.org/go/package/samba

Affected Distribution:   Affected Branch:  Affected Package:
OpenPKG Community        1.1-SOLID         samba-2.2.5-1.1.1
OpenPKG Community        1.2-SOLID         samba-2.2.7a-1.2.0
OpenPKG Community        CURRENT           samba-2.2.7a-20030207

Corrected Distribution:  Corrected Branch: Corrected Package:
OpenPKG Community        1.1-SOLID         samba-2.2.5-1.1.2
OpenPKG Community        1.2-SOLID         samba-2.2.7a-1.2.1
OpenPKG Community        CURRENT           samba-2.2.8-20030316