Samba: Data disclosure

Samba: Data disclosure A missing boundary check in Samba might lead to the disclosure of memory contents. samba 2009-03-07 2009-03-07 247620 remote 3.0.33 3.0.33

Samba is a suite of SMB and CIFS client/server programs.

Samba does not properly check memory boundaries when handling trans, rans2, and nttrans requests.

A remote attacker could send specially crafted requests to a Samba daemon, leading to the disclosure of arbitrary memory or to a Denial of Service.

There is no known workaround at this time.

All Samba users should upgrade to the latest version:


    # emerge --sync
    # emerge --ask --oneshot --verbose ">=net-fs/samba-3.0.33"

CVE-2008-4314 craig rbu rbu