USN-1226-1: Samba vulnerabilities

Releases

• Ubuntu 10.04
• Ubuntu 8.04

Packages

• samba - SMB/CIFS file, print, and login server for Unix

Details

Dan Rosenberg discovered that Samba incorrectly handled changes to the mtab
file. A local attacker could use this issue to corrupt the mtab file,
possibly leading to a denial of service. (CVE-2011-1678)

Jan Lieskovsky discovered that Samba incorrectly filtered certain strings
being added to the mtab file. A local attacker could use this issue to
corrupt the mtab file, possibly leading to a denial of service. This issue
only affected Ubuntu 10.04 LTS. (CVE-2011-2724)

Dan Rosenberg discovered that Samba incorrectly handled the mtab lock file.
A local attacker could use this issue to create a stale lock file, possibly
leading to a denial of service. (CVE-2011-3585)

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 8.04

• smbfs - 3.0.28a-1ubuntu4.16

Ubuntu 10.04

• smbfs - 2:3.4.7~dfsg-1ubuntu3.8

In general, a standard system update will make all the necessary changes.

References

• CVE-2011-1678
• CVE-2011-2724
• CVE-2011-3585

Related notices

• USN-1226-2: smbfs, cifs-utils