Nessus Plugin #15300

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

[DSA463] DSA-463-1 samba

Family:

Debian Local Security Checks

Category:

infos

Copyright:

This script is (C) 2004 Michel Arboi

Summary:

DSA-463-1 samba

Version:

$Revision: 1.4 $

Cve_id:

CVE-2004-0186

Bugtraq_id:

9619

Xrefs:

DSA:463

Description:

Samba, a LanManager-like file and printer server for Unix, was found
to contain a vulnerability whereby a local user could use the "smbmnt"
utility, which is setuid root, to mount a file share from a remote
server which contained setuid programs under the control of the user.
These programs could then be executed to gain privileges on the local
system.
For the current stable distribution (woody) this problem has been
fixed in version 2.2.3a-13.
For the unstable distribution (sid) this problem has been fixed in
version 3.0.2-2.
We recommend that you update your samba package.


Solution : http://www.debian.org/security/2004/dsa-463
Risk factor : High