=========================================================================Ubuntu Security Notice USN-1374-1
February 24, 2012

samba vulnerability
=========================================================================
A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 8.04 LTS

Summary:

Samba could be made to crash or run programs if it received specially
crafted network traffic.

Software Description:
- samba: SMB/CIFS file, print, and login server for Unix

Details:

Andy Davis discovered that Samba incorrectly handled certain AndX offsets.
A remote attacker could send a specially crafted request to the server and
cause a denial of service, or possibly execute arbitrary code.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 8.04 LTS:
  samba                           3.0.28a-1ubuntu4.17

In general, a standard system update will make all the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-1374-1
  CVE-2012-0870

Package Information:
  https://launchpad.net/ubuntu/+source/samba/3.0.28a-1ubuntu4.17


Ubuntu 1374-1: Samba vulnerability

February 24, 2012
Samba could be made to crash or run programs if it received specially crafted network traffic.

Summary

Update Instructions

The problem can be corrected by updating your system to the following package versions: Ubuntu 8.04 LTS: samba 3.0.28a-1ubuntu4.17 In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-1374-1

CVE-2012-0870

Severity
February 24, 2012

Package Information

https://launchpad.net/ubuntu/+source/samba/3.0.28a-1ubuntu4.17

Related News