Samba Pre-2.0.5 Vulnerabilities
BID:536
Info
Samba Pre-2.0.5 Vulnerabilities
| Bugtraq ID: | 536 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | Yes |
| Published: | Jul 21 1999 12:00AM |
| Updated: | Jul 21 1999 12:00AM |
| Credit: | These vulnerabilities were pointed out in a message posted to BugTraq by Andrew Tridgell <[email protected]> on July 21 regarding the release of Samba version 2.0.5 and the security-fixes relating to it. |
| Vulnerable: |
Samba Samba 2.0.4 |
| Not Vulnerable: |
Samba Samba 2.0.5 |
Solution / Fix
Samba Pre-2.0.5 Vulnerabilities
Solution:
As pointed out in the message to BugTraq, these problems and more were fixed in Samba version 2.0.5. See http://www.samba.org/ for the release notes and download.
The Samba 2.0.5 release has the following MD5 checksum
9fa63ff151ae697648020df37464eca9 b samba-2.0.5.tar.gz
The following fixes for the Samba package released with Debian 2.1 are available:
Source archives:
http://security.debian.org/dists/stable/updates/source/samba_2.0.5a-1.diff.gz
MD5 checksum: 1354ea63f79e7fa0b4b71685dbac118b
http://security.debian.org/dists/stable/updates/source/samba_2.0.5a-1.dsc
MD5 checksum: e51aeb259913179b60dbddd0b9e70bf5
http://security.debian.org/dists/stable/updates/source/samba_2.0.5a.orig.tar.gz
MD5 checksum: 497e5f98ed9b520b18e926ff2f7307ba
Architecture indendent archives:
http://security.debian.org/dists/stable/updates/binary-all/samba-doc_2.0.5a-1_all.deb
MD5 checksum: a9c1addcff72605f66a2334eef5e25ef
Alpha architecture:
http://security.debian.org/dists/stable/updates/binary-alpha/samba-common_2.0.5a-1_alpha.deb
MD5 checksum: 48b9651e2cefd6f6ad820ded9ebc9191
http://security.debian.org/dists/stable/updates/binary-alpha/samba_2.0.5a-1_alpha.deb
MD5 checksum: 9bb86e810254fe59feb02e817815b64f
http://security.debian.org/dists/stable/updates/binary-alpha/smbclient_2.0.5a-1_alpha.deb
MD5 checksum: 54a89ad98e1167a3265ff30881618b3f
http://security.debian.org/dists/stable/updates/binary-alpha/smbfs_2.0.5a-1_alpha.deb
MD5 checksum: 596e22cdf0848fcffd1885f16b38cf83
http://security.debian.org/dists/stable/updates/binary-alpha/smbwrapper_2.0.5a-1_alpha.deb
MD5 checksum: 5003fb2a3555daddd3d877529ac65e1e
http://security.debian.org/dists/stable/updates/binary-alpha/swat_2.0.5a-1_alpha.deb
MD5 checksum: e99ec78abdac4a8ab1348773e3fa32cd
Intel ia32 architecture:
http://security.debian.org/dists/stable/updates/binary-i386/samba-common_2.0.5a-1_i386.deb
MD5 checksum: eb8b9aa964912975db301f1e83919d36
http://security.debian.org/dists/stable/updates/binary-i386/samba_2.0.5a-1_i386.deb
MD5 checksum: 799ab1a56dd726548c33a130edfb9231
http://security.debian.org/dists/stable/updates/binary-i386/smbclient_2.0.5a-1_i386.deb
MD5 checksum: f5db7b12b67b24048d7ff915c9ec77ee
http://security.debian.org/dists/stable/updates/binary-i386/smbfs_2.0.5a-1_i386.deb
MD5 checksum: b6e90edf5db22cf3952a01f726cb7dd7
http://security.debian.org/dists/stable/updates/binary-i386/smbwrapper_2.0.5a-1_i386.deb
MD5 checksum: afabbae0e5ffdd03475a302586d75be5
http://security.debian.org/dists/stable/updates/binary-i386/swat_2.0.5a-1_i386.deb
MD5 checksum: bd235e608944c7cd3cc7a17fceab0199
Motorola 680x0 architecture:
http://security.debian.org/dists/stable/updates/binary-m68k/samba-common_2.0.5a-1_m68k.deb
MD5 checksum: 91d8b04d9ef76ca08fff5938007eb235
http://security.debian.org/dists/stable/updates/binary-m68k/samba_2.0.5a-1_m68k.deb
MD5 checksum: 6404ca678a20ad17e44b6c74cc3182a1
http://security.debian.org/dists/stable/updates/binary-m68k/smbclient_2.0.5a-1_m68k.deb
MD5 checksum: 37f0a04da50f9880b22cb3eaf27b2794
http://security.debian.org/dists/stable/updates/binary-m68k/smbfs_2.0.5a-1_m68k.deb
MD5 checksum: 3685040bee6e01039f6588f97dab2c26
http://security.debian.org/dists/stable/updates/binary-m68k/smbwrapper_2.0.5a-1_m68k.deb
MD5 checksum: 1a43221c50137cbf5d94f7ad90ab548e
http://security.debian.org/dists/stable/updates/binary-m68k/swat_2.0.5a-1_m68k.deb
MD5 checksum: 7b5e610c9b044fe81ac66881ea59af64
Sun Sparc architecture:
http://security.debian.org/dists/stable/updates/binary-sparc/samba-common_2.0.5a-1_sparc.deb
MD5 checksum: f4713291f719de2f32543e0fc37506ea
http://security.debian.org/dists/stable/updates/binary-sparc/samba_2.0.5a-1_sparc.deb
MD5 checksum: afb22260c07c60e4afd390bb3e108674
http://security.debian.org/dists/stable/updates/binary-sparc/smbclient_2.0.5a-1_sparc.deb
MD5 checksum: 28b22378ddb79b05d29b4b4fac2038c4
http://security.debian.org/dists/stable/updates/binary-sparc/smbfs_2.0.5a-1_sparc.deb
MD5 checksum: 8747b52257b451a1e19c93ea10048369
http://security.debian.org/dists/stable/updates/binary-sparc/smbwrapper_2.0.5a-1_sparc.deb
MD5 checksum: 420bfe236fcc1591175acd7eb3ad83e0
http://security.debian.org/dists/stable/updates/binary-sparc/swat_2.0.5a-1_sparc.deb
MD5 checksum: 38380d76284421c18e557e2d3a413a62
These files will be moved into
ftp://ftp.debian.org/debian/dists/stable/*/binary-$arch/ soon.
For not yet released architectures please refer to the appropriate
directory ftp://ftp.debian.org/debian/dists/sid/binary-$arch/ .
RedHat Fixes:
Red Hat Linux 6.0:
Intel: ftp://updates.redhat.com/6.0/i386/
samba-2.0.5a-1.i386.rpm
samba-client-2.0.5a-1.i386.rpm
Alpha: ftp://updates.redhat.com/6.0/alpha/
samba-2.0.5a-1.alpha.rpm
samba-client-2.0.5a-1.alpha.rpm
Sparc: ftp://updates.redhat.com/6.0/sparc/
samba-2.0.5a-1.sparc.rpm
samba-client-2.0.5a-1.sparc.rpm
Source: ftp://updates.redhat.com/6.0/
samba-2.0.5a-1.src.rpm
Red Hat Linux 5.2:
Intel: ftp://updates.redhat.com/5.2/i386/
samba-2.0.5a-0.5.2.i386.rpm
samba-client-2.0.5a-0.5.2.i386.rpm
Alpha: ftp://updates.redhat.com/5.2/alpha/
samba-2.0.5a-0.5.2.alpha.rpm
samba-client-2.0.5a-0.5.2.alpha.rpm
Sparc: ftp://updates.redhat.com/5.2/sparc/
samba-2.0.5a-0.5.2.sparc.rpm
samba-client-2.0.5a-0.5.2.sparc.rpm
Source: ftp://updates.redhat.com/5.2/
samba-2.0.5a-0.5.2.src.rpm
Red Hat Linux 4.2:
Intel: ftp://updates.redhat.com/4.2/i386/
samba-2.0.5a-0.4.2.i386.rpm
samba-client-2.0.5a-0.4.2.i386.rpm
Alpha: ftp://updates.redhat.com/4.2/alpha/
samba-2.0.5a-0.4.2.alpha.rpm
samba-client-2.0.5a-0.4.2.alpha.rpm
Sparc: ftp://updates.redhat.com/4.2/sparc/
samba-2.0.5a-0.4.2.sparc.rpm
samba-client-2.0.5a-0.4.2.sparc.rpm
Source: ftp://updates.redhat.com/4.2/
samba-2.0.5a-0.4.2.src.rpm
Solution:
As pointed out in the message to BugTraq, these problems and more were fixed in Samba version 2.0.5. See http://www.samba.org/ for the release notes and download.
The Samba 2.0.5 release has the following MD5 checksum
9fa63ff151ae697648020df37464eca9 b samba-2.0.5.tar.gz
The following fixes for the Samba package released with Debian 2.1 are available:
Source archives:
http://security.debian.org/dists/stable/updates/source/samba_2.0.5a-1.diff.gz
MD5 checksum: 1354ea63f79e7fa0b4b71685dbac118b
http://security.debian.org/dists/stable/updates/source/samba_2.0.5a-1.dsc
MD5 checksum: e51aeb259913179b60dbddd0b9e70bf5
http://security.debian.org/dists/stable/updates/source/samba_2.0.5a.orig.tar.gz
MD5 checksum: 497e5f98ed9b520b18e926ff2f7307ba
Architecture indendent archives:
http://security.debian.org/dists/stable/updates/binary-all/samba-doc_2.0.5a-1_all.deb
MD5 checksum: a9c1addcff72605f66a2334eef5e25ef
Alpha architecture:
http://security.debian.org/dists/stable/updates/binary-alpha/samba-common_2.0.5a-1_alpha.deb
MD5 checksum: 48b9651e2cefd6f6ad820ded9ebc9191
http://security.debian.org/dists/stable/updates/binary-alpha/samba_2.0.5a-1_alpha.deb
MD5 checksum: 9bb86e810254fe59feb02e817815b64f
http://security.debian.org/dists/stable/updates/binary-alpha/smbclient_2.0.5a-1_alpha.deb
MD5 checksum: 54a89ad98e1167a3265ff30881618b3f
http://security.debian.org/dists/stable/updates/binary-alpha/smbfs_2.0.5a-1_alpha.deb
MD5 checksum: 596e22cdf0848fcffd1885f16b38cf83
http://security.debian.org/dists/stable/updates/binary-alpha/smbwrapper_2.0.5a-1_alpha.deb
MD5 checksum: 5003fb2a3555daddd3d877529ac65e1e
http://security.debian.org/dists/stable/updates/binary-alpha/swat_2.0.5a-1_alpha.deb
MD5 checksum: e99ec78abdac4a8ab1348773e3fa32cd
Intel ia32 architecture:
http://security.debian.org/dists/stable/updates/binary-i386/samba-common_2.0.5a-1_i386.deb
MD5 checksum: eb8b9aa964912975db301f1e83919d36
http://security.debian.org/dists/stable/updates/binary-i386/samba_2.0.5a-1_i386.deb
MD5 checksum: 799ab1a56dd726548c33a130edfb9231
http://security.debian.org/dists/stable/updates/binary-i386/smbclient_2.0.5a-1_i386.deb
MD5 checksum: f5db7b12b67b24048d7ff915c9ec77ee
http://security.debian.org/dists/stable/updates/binary-i386/smbfs_2.0.5a-1_i386.deb
MD5 checksum: b6e90edf5db22cf3952a01f726cb7dd7
http://security.debian.org/dists/stable/updates/binary-i386/smbwrapper_2.0.5a-1_i386.deb
MD5 checksum: afabbae0e5ffdd03475a302586d75be5
http://security.debian.org/dists/stable/updates/binary-i386/swat_2.0.5a-1_i386.deb
MD5 checksum: bd235e608944c7cd3cc7a17fceab0199
Motorola 680x0 architecture:
http://security.debian.org/dists/stable/updates/binary-m68k/samba-common_2.0.5a-1_m68k.deb
MD5 checksum: 91d8b04d9ef76ca08fff5938007eb235
http://security.debian.org/dists/stable/updates/binary-m68k/samba_2.0.5a-1_m68k.deb
MD5 checksum: 6404ca678a20ad17e44b6c74cc3182a1
http://security.debian.org/dists/stable/updates/binary-m68k/smbclient_2.0.5a-1_m68k.deb
MD5 checksum: 37f0a04da50f9880b22cb3eaf27b2794
http://security.debian.org/dists/stable/updates/binary-m68k/smbfs_2.0.5a-1_m68k.deb
MD5 checksum: 3685040bee6e01039f6588f97dab2c26
http://security.debian.org/dists/stable/updates/binary-m68k/smbwrapper_2.0.5a-1_m68k.deb
MD5 checksum: 1a43221c50137cbf5d94f7ad90ab548e
http://security.debian.org/dists/stable/updates/binary-m68k/swat_2.0.5a-1_m68k.deb
MD5 checksum: 7b5e610c9b044fe81ac66881ea59af64
Sun Sparc architecture:
http://security.debian.org/dists/stable/updates/binary-sparc/samba-common_2.0.5a-1_sparc.deb
MD5 checksum: f4713291f719de2f32543e0fc37506ea
http://security.debian.org/dists/stable/updates/binary-sparc/samba_2.0.5a-1_sparc.deb
MD5 checksum: afb22260c07c60e4afd390bb3e108674
http://security.debian.org/dists/stable/updates/binary-sparc/smbclient_2.0.5a-1_sparc.deb
MD5 checksum: 28b22378ddb79b05d29b4b4fac2038c4
http://security.debian.org/dists/stable/updates/binary-sparc/smbfs_2.0.5a-1_sparc.deb
MD5 checksum: 8747b52257b451a1e19c93ea10048369
http://security.debian.org/dists/stable/updates/binary-sparc/smbwrapper_2.0.5a-1_sparc.deb
MD5 checksum: 420bfe236fcc1591175acd7eb3ad83e0
http://security.debian.org/dists/stable/updates/binary-sparc/swat_2.0.5a-1_sparc.deb
MD5 checksum: 38380d76284421c18e557e2d3a413a62
These files will be moved into
ftp://ftp.debian.org/debian/dists/stable/*/binary-$arch/ soon.
For not yet released architectures please refer to the appropriate
directory ftp://ftp.debian.org/debian/dists/sid/binary-$arch/ .
RedHat Fixes:
Red Hat Linux 6.0:
Intel: ftp://updates.redhat.com/6.0/i386/
samba-2.0.5a-1.i386.rpm
samba-client-2.0.5a-1.i386.rpm
Alpha: ftp://updates.redhat.com/6.0/alpha/
samba-2.0.5a-1.alpha.rpm
samba-client-2.0.5a-1.alpha.rpm
Sparc: ftp://updates.redhat.com/6.0/sparc/
samba-2.0.5a-1.sparc.rpm
samba-client-2.0.5a-1.sparc.rpm
Source: ftp://updates.redhat.com/6.0/
samba-2.0.5a-1.src.rpm
Red Hat Linux 5.2:
Intel: ftp://updates.redhat.com/5.2/i386/
samba-2.0.5a-0.5.2.i386.rpm
samba-client-2.0.5a-0.5.2.i386.rpm
Alpha: ftp://updates.redhat.com/5.2/alpha/
samba-2.0.5a-0.5.2.alpha.rpm
samba-client-2.0.5a-0.5.2.alpha.rpm
Sparc: ftp://updates.redhat.com/5.2/sparc/
samba-2.0.5a-0.5.2.sparc.rpm
samba-client-2.0.5a-0.5.2.sparc.rpm
Source: ftp://updates.redhat.com/5.2/
samba-2.0.5a-0.5.2.src.rpm
Red Hat Linux 4.2:
Intel: ftp://updates.redhat.com/4.2/i386/
samba-2.0.5a-0.4.2.i386.rpm
samba-client-2.0.5a-0.4.2.i386.rpm
Alpha: ftp://updates.redhat.com/4.2/alpha/
samba-2.0.5a-0.4.2.alpha.rpm
samba-client-2.0.5a-0.4.2.alpha.rpm
Sparc: ftp://updates.redhat.com/4.2/sparc/
samba-2.0.5a-0.4.2.sparc.rpm
samba-client-2.0.5a-0.4.2.sparc.rpm
Source: ftp://updates.redhat.com/4.2/
samba-2.0.5a-0.4.2.src.rpm