Samba Directory Access Control List Remote Integer Overflow Vulnerability

BID:11973

Info

Samba Directory Access Control List Remote Integer Overflow Vulnerability

Bugtraq ID: 11973
Class: Boundary Condition Error
CVE: CVE-2004-1154
Remote: Yes
Local: No
Published: Dec 16 2004 12:00AM
Updated: Oct 19 2006 01:14AM
Credit: Greg MacManus is credited with the discovery of this issue.
Vulnerable: Trustix Secure Linux 2.2
Trustix Secure Linux 2.1
Trustix Secure Linux 2.0
Trustix Secure Linux 1.5
Trustix Secure Enterprise Linux 2.0
SuSE Linux Enterprise Server 9
SuSE Linux Desktop 1.0
SuSE Linux 8.1
Sun Solaris 9_x86
Sun Solaris 9
SGI ProPack 3.0
SCO Unixware 7.1.4
Samba Samba 3.0.9
+ OpenPKG OpenPKG Current
 + OpenPKG OpenPKG Current
 + S.u.S.E. Linux Personal 9.1
Samba Samba 3.0.8
Samba Samba 3.0.7
+ Mandriva Linux Mandrake 10.1 x86_64
 + Mandriva Linux Mandrake 10.1 x86_64
 + Mandriva Linux Mandrake 10.1
+ Mandriva Linux Mandrake 10.1
+ OpenPKG OpenPKG 2.2
+ S.u.S.E. Linux Personal 9.2
+ S.u.S.E. Linux Personal 9.2
+ Trustix Secure Enterprise Linux 2.0
+ Trustix Secure Enterprise Linux 2.0
+ Trustix Secure Linux 2.2
+ Trustix Secure Linux 2.2
+ Trustix Secure Linux 2.1
+ Trustix Secure Linux 2.1
+ Trustix Secure Linux 2.0
+ Trustix Secure Linux 2.0
+ Trustix Secure Linux 1.5
+ Trustix Secure Linux 1.5
+ Ubuntu Ubuntu Linux 4.1 ppc
 + Ubuntu Ubuntu Linux 4.1 ppc
 + Ubuntu Ubuntu Linux 4.1 ia64
 + Ubuntu Ubuntu Linux 4.1 ia64
 + Ubuntu Ubuntu Linux 4.1 ia32
 + Ubuntu Ubuntu Linux 4.1 ia32
 Samba Samba 3.0.6
+ Mandriva Linux Mandrake 10.0 AMD64
 + Mandriva Linux Mandrake 10.0 AMD64
 + Mandriva Linux Mandrake 10.0
+ Mandriva Linux Mandrake 10.0
+ Turbolinux Appliance Server 1.0 Workgroup Edition
 + Turbolinux Appliance Server 1.0 Workgroup Edition
 + Turbolinux Appliance Server 1.0 Hosting Edition
 + Turbolinux Appliance Server 1.0 Hosting Edition
 + Turbolinux Appliance Server Hosting Edition 1.0
+ Turbolinux Appliance Server Hosting Edition 1.0
+ Turbolinux Appliance Server Workgroup Edition 1.0
+ Turbolinux Appliance Server Workgroup Edition 1.0
+ Turbolinux Home
+ Turbolinux Home
+ Turbolinux Turbolinux Desktop 10.0
+ Turbolinux Turbolinux Desktop 10.0
+ Turbolinux Turbolinux Server 10.0
+ Turbolinux Turbolinux Server 10.0
+ Turbolinux Turbolinux Server 8.0
+ Turbolinux Turbolinux Server 8.0
+ Turbolinux Turbolinux Workstation 8.0
Samba Samba 3.0.5
Samba Samba 3.0.4 -r1
Samba Samba 3.0.4
+ OpenPKG OpenPKG 2.1
+ S.u.S.E. Linux Personal 9.1
+ S.u.S.E. Linux Personal 9.1
+ S.u.S.E. Linux Personal 9.1
+ Slackware Linux 10.0
Samba Samba 3.0.3
Samba Samba 3.0.2 a
Samba Samba 3.0.2
Samba Samba 3.0.1
Samba Samba 3.0 alpha
Samba Samba 3.0
+ Apple Mac OS X 10.3.2
+ Apple Mac OS X 10.3.2
+ Apple Mac OS X 10.3.1
+ Apple Mac OS X 10.3.1
+ Apple Mac OS X 10.3
+ Apple Mac OS X 10.3
+ Apple Mac OS X Server 10.3.2
+ Apple Mac OS X Server 10.3.1
+ Apple Mac OS X Server 10.3.1
+ Apple Mac OS X Server 10.3
+ Apple Mac OS X Server 10.3
Samba Samba 2.2.12
+ Trustix Secure Linux 2.0
+ Trustix Secure Linux 1.5
Samba Samba 2.2.11
Samba Samba 2.2.9
Samba Samba 2.2.8 a
+ Mandriva Linux Mandrake 9.2 amd64
 + Mandriva Linux Mandrake 9.2 amd64
 + Mandriva Linux Mandrake 9.2
+ Mandriva Linux Mandrake 9.2
+ S.u.S.E. Linux Personal 9.1
+ S.u.S.E. Linux Personal 9.0 x86_64
 + S.u.S.E. Linux Personal 9.0 x86_64
 + S.u.S.E. Linux Personal 9.0
+ S.u.S.E. Linux Personal 9.0
+ S.u.S.E. Linux Personal 8.2
+ S.u.S.E. Linux Personal 8.2
+ SuSE Linux 8.1
+ SuSE Linux 8.1
Samba Samba 2.2.8
+ FreeBSD FreeBSD 5.0
+ FreeBSD FreeBSD 5.0
+ FreeBSD FreeBSD 4.8
+ FreeBSD FreeBSD 4.8
+ FreeBSD FreeBSD 4.7
+ FreeBSD FreeBSD 4.7
+ FreeBSD FreeBSD 4.6
+ FreeBSD FreeBSD 4.6
+ Mandriva Linux Mandrake 9.2 amd64
 + Mandriva Linux Mandrake 9.2
+ Mandriva Linux Mandrake 9.2
+ Trustix Secure Linux 1.5
+ Trustix Secure Linux 1.5
+ Trustix Secure Linux 1.2
+ Trustix Secure Linux 1.2
Samba Samba 2.2.7 a
+ MandrakeSoft Corporate Server 2.1 x86_64
 + MandrakeSoft Corporate Server 2.1 x86_64
 + MandrakeSoft Corporate Server 2.1
+ MandrakeSoft Corporate Server 2.1
+ MandrakeSoft Multi Network Firewall 2.0
+ MandrakeSoft Multi Network Firewall 2.0
+ Mandriva Linux Mandrake 9.1 ppc
 + Mandriva Linux Mandrake 9.1 ppc
 + Mandriva Linux Mandrake 9.1
+ Mandriva Linux Mandrake 9.1
+ Mandriva Linux Mandrake 9.0
+ Mandriva Linux Mandrake 9.0
+ Mandriva Linux Mandrake 8.2 ppc
 + Mandriva Linux Mandrake 8.2 ppc
 + Mandriva Linux Mandrake 8.2
+ Mandriva Linux Mandrake 8.2
+ Mandriva Linux Mandrake 8.1 ia64
 + Mandriva Linux Mandrake 8.1 ia64
 + Mandriva Linux Mandrake 8.1
+ Mandriva Linux Mandrake 8.1
+ Mandriva Linux Mandrake 8.0 ppc
 + Mandriva Linux Mandrake 8.0 ppc
 + Mandriva Linux Mandrake 8.0
+ Mandriva Linux Mandrake 8.0
+ OpenPKG OpenPKG 1.2
+ OpenPKG OpenPKG 1.2
+ OpenPKG OpenPKG 1.1
+ Redhat Linux 9.0 i386
 + Redhat Linux 9.0 i386
 + S.u.S.E. Linux Personal 8.2
+ S.u.S.E. Linux Personal 8.2
+ Slackware Linux 8.1
+ Slackware Linux 8.1
+ Turbolinux Appliance Server Hosting Edition 1.0
+ Turbolinux Appliance Server Hosting Edition 1.0
+ Turbolinux Appliance Server Workgroup Edition 1.0
+ Turbolinux Appliance Server Workgroup Edition 1.0
+ Turbolinux Home
+ Turbolinux Turbolinux Desktop 10.0
+ Turbolinux Turbolinux Desktop 10.0
+ Turbolinux Turbolinux Server 8.0
+ Turbolinux Turbolinux Server 8.0
+ Turbolinux Turbolinux Server 7.0
+ Turbolinux Turbolinux Server 7.0
+ Turbolinux Turbolinux Workstation 8.0
+ Turbolinux Turbolinux Workstation 8.0
+ Turbolinux Turbolinux Workstation 7.0
+ Turbolinux Turbolinux Workstation 7.0
Samba Samba 2.2.7
+ Redhat Linux 8.0 i386
 + Redhat Linux 8.0
+ Redhat Linux 7.3 i386
 + Redhat Linux 7.3
+ Redhat Linux 7.2 ia64
 + Redhat Linux 7.2 i686
 + Redhat Linux 7.2 i386
 + Redhat Linux 7.2
+ Sun Linux 5.0.6
+ Sun Solaris 9_x86
 + Sun Solaris 9_x86
 + Sun Solaris 9
 + Sun Solaris 9
 Samba Samba 2.2.6
+ Mandriva Linux Mandrake 9.0
Samba Samba 2.2.5
+ Apple Mac OS X 10.2.4
+ Apple Mac OS X 10.2.4
+ Apple Mac OS X 10.2.3
+ Apple Mac OS X 10.2.3
+ Apple Mac OS X 10.2.2
+ Apple Mac OS X 10.2.2
+ Apple Mac OS X 10.2.1
+ Apple Mac OS X 10.2.1
+ Apple Mac OS X 10.2
+ Apple Mac OS X 10.2
+ Gentoo Linux 1.4 _rc3
 + Gentoo Linux 1.4 _rc3
 + HP CIFS/9000 Server A.01.09.02
 + HP CIFS/9000 Server A.01.09.01
 + HP CIFS/9000 Server A.01.09.01
 + HP CIFS/9000 Server A.01.09
 + HP CIFS/9000 Server A.01.09
 + HP CIFS/9000 Server A.01.08.01
 + HP CIFS/9000 Server A.01.08.01
 + HP CIFS/9000 Server A.01.08
 + HP CIFS/9000 Server A.01.08
 + HP CIFS/9000 Server A.01.07
 + HP CIFS/9000 Server A.01.07
 + HP CIFS/9000 Server A.01.06
 + HP CIFS/9000 Server A.01.06
 + HP CIFS/9000 Server A.01.05
 + HP CIFS/9000 Server A.01.05
 + OpenPKG OpenPKG 1.1
+ OpenPKG OpenPKG 1.1
+ Redhat Linux 8.0 i686
 + Redhat Linux 8.0 i686
 + Redhat Linux 8.0 i386
 + Redhat Linux 8.0 i386
 + Redhat Linux 8.0
+ Redhat Linux 8.0
+ SuSE Linux 8.1
+ SuSE Linux 8.1
Samba Samba 2.2.5
+ Redhat Linux 8.0
Samba Samba 2.2.4
+ Slackware Linux 8.1
Samba Samba 2.2.3 a
+ Debian Linux 3.0 sparc
 + Debian Linux 3.0 s/390
 + Debian Linux 3.0 s/390
 + Debian Linux 3.0 ppc
 + Debian Linux 3.0 ppc
 + Debian Linux 3.0 mipsel
 + Debian Linux 3.0 mipsel
 + Debian Linux 3.0 mips
 + Debian Linux 3.0 mips
 + Debian Linux 3.0 m68k
 + Debian Linux 3.0 m68k
 + Debian Linux 3.0 ia-64
 + Debian Linux 3.0 ia-64
 + Debian Linux 3.0 ia-32
 + Debian Linux 3.0 ia-32
 + Debian Linux 3.0 hppa
 + Debian Linux 3.0 hppa
 + Debian Linux 3.0 arm
 + Debian Linux 3.0 arm
 + Debian Linux 3.0 alpha
 + Debian Linux 3.0 alpha
 + Debian Linux 3.0
+ Debian Linux 3.0
+ SuSE Linux 8.0
+ SuSE Linux 8.0
Samba Samba 2.2.3 a
+ Debian Linux 3.0 sparc
 + Debian Linux 3.0 sparc
 + Debian Linux 3.0 s/390
 + Debian Linux 3.0 s/390
 + Debian Linux 3.0 ppc
 + Debian Linux 3.0 ppc
 + Debian Linux 3.0 mipsel
 + Debian Linux 3.0 mipsel
 + Debian Linux 3.0 mips
 + Debian Linux 3.0 mips
 + Debian Linux 3.0 m68k
 + Debian Linux 3.0 m68k
 + Debian Linux 3.0 ia-64
 + Debian Linux 3.0 ia-64
 + Debian Linux 3.0 ia-32
 + Debian Linux 3.0 ia-32
 + Debian Linux 3.0 hppa
 + Debian Linux 3.0 hppa
 + Debian Linux 3.0 arm
 + Debian Linux 3.0 arm
 + Debian Linux 3.0 alpha
 + Debian Linux 3.0 alpha
 + Debian Linux 3.0
+ Debian Linux 3.0
+ Mandriva Linux Mandrake 8.2 ppc
 + Mandriva Linux Mandrake 8.2 ppc
 + Mandriva Linux Mandrake 8.2
+ Mandriva Linux Mandrake 8.2
+ Redhat Linux 7.3 i686
 + Redhat Linux 7.3 i686
 + Redhat Linux 7.3 i386
 + Redhat Linux 7.3 i386
 + Redhat Linux 7.3
+ Redhat Linux 7.3
+ SuSE Linux 8.0 i386
 + SuSE Linux 8.0 i386
 + SuSE Linux 8.0
+ SuSE Linux 8.0
Samba Samba 2.2.3
+ Apple Mac OS X 10.2.4
+ Apple Mac OS X 10.2.4
+ Apple Mac OS X Server 10.2.4
+ Debian Linux 3.0 sparc
 + Debian Linux 3.0 s/390
 + Debian Linux 3.0 ppc
 + Debian Linux 3.0 mipsel
 + Debian Linux 3.0 mips
 + Debian Linux 3.0 m68k
 + Debian Linux 3.0 ia-64
 + Debian Linux 3.0 ia-32
 + Debian Linux 3.0 hppa
 + Debian Linux 3.0 arm
 + Debian Linux 3.0 alpha
 + Debian Linux 3.0
+ Mandriva Linux Mandrake 8.2 ppc
 + Mandriva Linux Mandrake 8.2
Samba Samba 2.2.2
+ Caldera OpenLinux Server 3.1.1
+ Caldera OpenLinux Server 3.1.1
+ Caldera OpenLinux Server 3.1
+ Caldera OpenLinux Workstation 3.1.1
+ Caldera OpenLinux Workstation 3.1.1
+ Caldera OpenLinux Workstation 3.1
+ HP CIFS/9000 Server A.01.09
 + HP CIFS/9000 Server A.01.08.01
 + HP CIFS/9000 Server A.01.08.01
 + HP CIFS/9000 Server A.01.08
 + HP CIFS/9000 Server A.01.08
 + Mandriva Linux Mandrake 8.1 ia64
 + Mandriva Linux Mandrake 8.1 ia64
 + Mandriva Linux Mandrake 8.1
+ Mandriva Linux Mandrake 8.1
+ OpenPKG OpenPKG 1.0
+ OpenPKG OpenPKG 1.0
Samba Samba 2.2.1 a
+ Redhat Linux 7.2 i686
 + Redhat Linux 7.2 i686
 + Redhat Linux 7.2 i586
 + Redhat Linux 7.2 i586
 + Redhat Linux 7.2 i386
 + Redhat Linux 7.2 i386
 + Redhat Linux 7.2 athlon
 + Redhat Linux 7.2 athlon
 + Redhat Linux 7.2
+ Redhat Linux 7.2
+ Sun Linux 5.0
+ Sun LX50
+ SuSE Linux 7.3 sparc
 + SuSE Linux 7.3 sparc
 + SuSE Linux 7.3 ppc
 + SuSE Linux 7.3 ppc
 + SuSE Linux 7.3 i386
 + SuSE Linux 7.3 i386
 + SuSE Linux 7.3
+ SuSE Linux 7.3
Samba Samba 2.2.1 a
+ SuSE Linux 7.3 sparc
 + SuSE Linux 7.3 sparc
 + SuSE Linux 7.3 ppc
 + SuSE Linux 7.3 i386
 + SuSE Linux 7.3 i386
 Samba Samba 2.2 a
+ SuSE Linux 7.2 i386
 + SuSE Linux 7.2
+ SuSE Linux 7.2
Samba Samba 2.2 .0a
+ Slackware Linux 8.0
+ Slackware Linux 8.0
+ SuSE Linux 7.2 i386
 + SuSE Linux 7.2
+ SuSE Linux 7.2
Samba Samba 2.2 .0
- SuSE Linux 7.2
Samba Samba 2.0.10
+ SuSE Linux 7.1 x86
 + SuSE Linux 7.1 x86
 + SuSE Linux 7.1 sparc
 + SuSE Linux 7.1 sparc
 + SuSE Linux 7.1 ppc
 + SuSE Linux 7.1 ppc
 + SuSE Linux 7.1 alpha
 + SuSE Linux 7.1 alpha
 + SuSE Linux 7.1
+ SuSE Linux 7.1
+ Veritas Software ServPoint NAS 3.5
+ Veritas Software ServPoint NAS 1.2.2
+ Veritas Software ServPoint NAS 1.2.2
+ Veritas Software ServPoint NAS 1.2.1
+ Veritas Software ServPoint NAS 1.2.1
+ Veritas Software ServPoint NAS 1.2
+ Veritas Software ServPoint NAS 1.2
+ Veritas Software ServPoint NAS 1.1
+ Veritas Software ServPoint NAS 1.1
+ Wirex Immunix OS 7+
 + Wirex Immunix OS 7+
 Samba Samba 2.0.9
- Apple Mac OS X 10.0.4
- Apple Mac OS X 10.0.4
- Apple Mac OS X Server 10.0
- Apple Mac OS X Server 10.0
- Caldera OpenLinux Server 3.1
- Caldera OpenLinux Workstation 3.1
- Caldera OpenLinux Workstation 3.1
- Debian Linux 2.2
- Debian Linux 2.2
- Redhat Linux 7.1
- Redhat Linux 7.1
- Redhat Linux 7.0
- Redhat Linux 7.0
- Redhat Linux 6.2
 - Redhat Linux 6.2
 - Sun Solaris 8_x86
 - Sun Solaris 8_x86
 - Sun Solaris 8_sparc
 - Sun Solaris 8_sparc
 - Sun Solaris 7.0_x86
 - Sun Solaris 7.0_x86
 - Sun Solaris 7.0
 - Sun Solaris 7.0
 - SuSE Linux 7.1 sparc
 - SuSE Linux 7.1 sparc
 - SuSE Linux 7.1 ppc
 - SuSE Linux 7.1 ppc
 - SuSE Linux 7.1 alpha
 - SuSE Linux 7.1 alpha
 - SuSE Linux 7.1
- SuSE Linux 7.1
- SuSE Linux 7.0 sparc
 - SuSE Linux 7.0 sparc
 - SuSE Linux 7.0 ppc
 - SuSE Linux 7.0 ppc
 - SuSE Linux 7.0 alpha
 - SuSE Linux 7.0 alpha
 - SuSE Linux 7.0
- SuSE Linux 7.0
- SuSE Linux 6.4 ppc
 - SuSE Linux 6.4 ppc
 - SuSE Linux 6.4 alpha
 - SuSE Linux 6.4 alpha
 - SuSE Linux 6.4
- SuSE Linux 6.4
- SuSE Linux 6.3 alpha
 - SuSE Linux 6.3 alpha
 - SuSE Linux 6.3
- SuSE Linux 6.3
- Trustix Secure Linux 1.2
- Trustix Secure Linux 1.2
- Trustix Secure Linux 1.1
- Trustix Secure Linux 1.1
- Wirex Immunix OS 7.0 -Beta
 - Wirex Immunix OS 7.0 -Beta
 - Wirex Immunix OS 7.0
- Wirex Immunix OS 7.0
- Wirex Immunix OS 6.2
- Wirex Immunix OS 6.2
Samba Samba 2.0.8
- Caldera OpenLinux 2.4
- Caldera OpenLinux 2.4
- Debian Linux 2.2 sparc
 - Debian Linux 2.2 sparc
 - Debian Linux 2.2 powerpc
 - Debian Linux 2.2 powerpc
 - Debian Linux 2.2 arm
 - Debian Linux 2.2 arm
 - Debian Linux 2.2 alpha
 - Debian Linux 2.2 alpha
 - Debian Linux 2.2 68k
 - Debian Linux 2.2 68k
 - Debian Linux 2.2
- Debian Linux 2.2
- Redhat Linux 7.1 i386
 - Redhat Linux 7.1 i386
 - Redhat Linux 7.1 alpha
 - Redhat Linux 7.0 i386
 - Redhat Linux 7.0 i386
 - Redhat Linux 7.0 alpha
 - Redhat Linux 7.0 alpha
 - Redhat Linux 6.2 sparc
 - Redhat Linux 6.2 sparc
 - Redhat Linux 6.2 i386
 - Redhat Linux 6.2 i386
 - Redhat Linux 6.2 alpha
 - Redhat Linux 6.2 alpha
 - Redhat Linux 5.2 sparc
 - Redhat Linux 5.2 sparc
 - Redhat Linux 5.2 i386
 - Redhat Linux 5.2 i386
 - Redhat Linux 5.2 alpha
 - Redhat Linux 5.2 alpha
 - SCO eDesktop 2.4
- SCO eDesktop 2.4
- SCO eServer 2.3.1
- SCO eServer 2.3.1
- Sun Solaris 8_x86
 - Sun Solaris 8_x86
 - Sun Solaris 8_sparc
 - Sun Solaris 8_sparc
 - Sun Solaris 7.0_x86
 - Sun Solaris 7.0_x86
 - Sun Solaris 7.0
 - Sun Solaris 7.0
 - SuSE Linux 7.1
- SuSE Linux 7.1
- SuSE Linux 7.0
- SuSE Linux 7.0
- SuSE Linux 6.4
- SuSE Linux 6.4
- Wirex Immunix OS 7.0 -Beta
 - Wirex Immunix OS 7.0 -Beta
 - Wirex Immunix OS 7.0
- Wirex Immunix OS 7.0
- Wirex Immunix OS 6.2
- Wirex Immunix OS 6.2
Samba Samba 2.0.7
+ Caldera OpenLinux 2.3
+ Caldera OpenLinux 2.3
+ Debian Linux 2.3 sparc
 + Debian Linux 2.3 sparc
 + Debian Linux 2.3 powerpc
 + Debian Linux 2.3 powerpc
 + Debian Linux 2.3 alpha
 + Debian Linux 2.3 alpha
 + Debian Linux 2.3
+ Debian Linux 2.3
+ Debian Linux 2.2 sparc
 + Debian Linux 2.2 sparc
 + Debian Linux 2.2 powerpc
 + Debian Linux 2.2 powerpc
 + Debian Linux 2.2 arm
 + Debian Linux 2.2 arm
 + Debian Linux 2.2 alpha
 + Debian Linux 2.2 alpha
 + Debian Linux 2.2 68k
 + Debian Linux 2.2 68k
 + Debian Linux 2.2
+ Debian Linux 2.2
- FreeBSD FreeBSD 5.0
- FreeBSD FreeBSD 5.0
- FreeBSD FreeBSD 4.2
- FreeBSD FreeBSD 4.2
+ Mandriva Linux Mandrake 7.1
+ Mandriva Linux Mandrake 7.1
+ Mandriva Linux Mandrake 7.0
+ Mandriva Linux Mandrake 7.0
+ Progeny Debian 1.0
+ Progeny Debian 1.0
+ Redhat Linux 7.1 i686
 + Redhat Linux 7.1 i686
 + Redhat Linux 7.1 i586
 + Redhat Linux 7.1 i586
 + Redhat Linux 7.1 i386
 + Redhat Linux 7.1 i386
 + Redhat Linux 7.1
+ Redhat Linux 7.1
+ Redhat Linux 7.0 i686
 + Redhat Linux 7.0 i686
 + Redhat Linux 7.0 i386
 + Redhat Linux 7.0 i386
 + Redhat Linux 7.0
+ Redhat Linux 7.0
+ Redhat Linux 6.2 E sparc
 + Redhat Linux 6.2 E i386
 + Redhat Linux 6.2 E alpha
 + Redhat Linux 6.2 sparc
 + Redhat Linux 6.2 i386
 + Redhat Linux 6.2 alpha
 + Redhat Linux 6.1 sparc
 + Redhat Linux 6.1 i386
 + Redhat Linux 6.1 alpha
 + SCO eDesktop 2.4
+ SCO eDesktop 2.4
+ SCO eServer 2.3.1
+ SCO eServer 2.3.1
+ Sun Cobalt Qube3 4000WG
+ Sun Cobalt Qube3 4000WG
+ Sun Cobalt RaQ 550 4100R
+ Sun Cobalt RaQ 550 4100R
+ Sun Cobalt RaQ XTR 3500R
+ Sun Cobalt RaQ XTR 3500R
+ Trustix Secure Linux 1.2
+ Trustix Secure Linux 1.2
+ Trustix Secure Linux 1.1
+ Trustix Secure Linux 1.1
+ Wirex Immunix OS 7.0 -Beta
 + Wirex Immunix OS 7.0 -Beta
 + Wirex Immunix OS 7.0
+ Wirex Immunix OS 7.0
+ Wirex Immunix OS 6.2
+ Wirex Immunix OS 6.2
Samba Samba 2.0.6
+ Redhat Linux 6.2 sparcv9
 + Redhat Linux 6.2 sparcv9
 + Redhat Linux 6.2 E sparc
 + Redhat Linux 6.2 E sparc
 + Redhat Linux 6.2 E i386
 + Redhat Linux 6.2 E i386
 + Redhat Linux 6.2 E alpha
 + Redhat Linux 6.2 E alpha
 + Redhat Linux 6.2 sparc
 + Redhat Linux 6.2 sparc
 + Redhat Linux 6.2 i386
 + Redhat Linux 6.2 i386
 + Redhat Linux 6.2 alpha
 + Redhat Linux 6.2 alpha
 + Redhat Linux 6.2
 + Redhat Linux 6.2
 + Sun Cobalt RaQ4 3001R
Samba Samba 2.0.5
- Caldera OpenLinux 2.3
- Caldera OpenLinux 2.3
- SCO eServer 2.3.1
Samba Samba 2.0.4
+ Debian Linux 2.1
+ Redhat Linux 6.0
+ Redhat Linux 6.0
+ Redhat Linux 5.2 i386
 + Redhat Linux 5.2 i386
 + Redhat Linux 4.2
+ Redhat Linux 4.2
Samba Samba 2.0.3
Samba Samba 2.0.2
Samba Samba 2.0.1
Samba Samba 2.0 .0
S.u.S.E. Linux Personal 9.2
S.u.S.E. Linux Personal 9.1
S.u.S.E. Linux Personal 9.0 x86_64
S.u.S.E. Linux Personal 9.0
S.u.S.E. Linux Personal 8.2
Redhat Fedora Core3
Redhat Fedora Core2
Redhat Enterprise Linux WS 3
Redhat Enterprise Linux WS 2.1 IA64
Redhat Enterprise Linux WS 2.1
Redhat Enterprise Linux ES 3
Redhat Enterprise Linux ES 2.1 IA64
Redhat Enterprise Linux ES 2.1
Redhat Enterprise Linux AS 3
Redhat Enterprise Linux AS 2.1 IA64
Redhat Enterprise Linux AS 2.1
Redhat Desktop 3.0
Redhat Advanced Workstation for the Itanium Processor 2.1 IA64
Redhat Advanced Workstation for the Itanium Processor 2.1
HP HP-UX B.11.23
HP HP-UX B.11.22
HP HP-UX B.11.11
HP HP-UX B.11.00
ALT Linux ALT Linux Junior 2.3
ALT Linux ALT Linux Compact 2.3
Not Vulnerable: Samba Samba 3.0.10
+ Slackware Linux 10.1
+ Trustix Secure Enterprise Linux 2.0
+ Trustix Secure Enterprise Linux 2.0
+ Trustix Secure Enterprise Linux 2.0
+ Trustix Secure Linux 2.2
+ Trustix Secure Linux 2.1
+ Trustix Secure Linux 2.1
+ Trustix Secure Linux 2.1

Discussion

Samba Directory Access Control List Remote Integer Overflow Vulnerability

A remotely exploitable integer-overflow vulnerability affects Samba's directory access control list (DACL) processing functionality. This issue is due to the application's failure to properly perform sanity checking on calculated data sizes before copying data into static process buffers.

An attacker with access to an SMB share may leverage this issue to overwrite the heap of the affected process, facilitating code execution with superuser privileges.

Exploit / POC

Samba Directory Access Control List Remote Integer Overflow Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Solution / Fix

Samba Directory Access Control List Remote Integer Overflow Vulnerability

Solution:
The vendor has released patches dealing with this issue. Please see the referenced advisories for more information.

Sun Microsystems has updated Alert ID 101643 (formerly 57730), detailing a final resolution to this issue.


Samba Samba 2.2.12

Samba Samba 2.2.3 a

Samba Samba 2.2.5

Samba Samba 2.2.6

Samba Samba 2.2.7 a

Samba Samba 2.2.8 a

Samba Samba 2.2.9

SGI ProPack 3.0

Samba Samba 3.0.2 a

Samba Samba 3.0.3

Samba Samba 3.0.4

Samba Samba 3.0.6

Samba Samba 3.0.7

Samba Samba 3.0.8

Samba Samba 3.0.9

SCO Unixware 7.1.4

References

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report