Description
Logic error in the SID/Name translation functionality in smbd in Samba 3.0.23d through 3.0.25pre2 allows local users to gain temporary privileges and execute SMB/CIFS protocol operations via unspecified vectors that cause the daemon to transition to the root user.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://security.gentoo.org/glsa/glsa-200705-15.xml ↗
- http://secunia.com/advisories/25289 ↗
- http://www.vupen.com/english/advisories/2007/1805 ↗
- http://secunia.com/advisories/25772 ↗
- http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.012.html ↗
- http://lists.suse.com/archive/suse-security-announce/2007-May/0006.html ↗
- http://secunia.com/advisories/25270 ↗
- http://www.securityfocus.com/archive/1/468670/100/0/threaded ↗
- http://www.vupen.com/english/advisories/2007/2281 ↗
- http://www.vupen.com/english/advisories/2007/2210 ↗
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01078980 ↗
- http://www.trustix.org/errata/2007/0017/ ↗
- http://www.securitytracker.com/id?1018049 ↗
- http://www.ubuntu.com/usn/usn-460-1 ↗
- http://securityreason.com/securityalert/2701 ↗
- http://secunia.com/advisories/25241 ↗
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:104 ↗
- http://secunia.com/advisories/25256 ↗
- https://issues.rpath.com/browse/RPL-1366 ↗
- http://secunia.com/advisories/25259 ↗
- http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.475906 ↗
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-102964-1 ↗
- http://www.debian.org/security/2007/dsa-1291 ↗
- http://www.securityfocus.com/archive/1/468548/100/0/threaded ↗
- http://secunia.com/advisories/25232 ↗
- http://secunia.com/advisories/25251 ↗
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-200588-1 ↗
- http://www.ubuntu.com/usn/usn-460-2 ↗
- http://secunia.com/advisories/25246 ↗
- http://osvdb.org/34698 ↗
- http://secunia.com/advisories/25255 ↗
- http://www.samba.org/samba/security/CVE-2007-2444.html ↗
- http://www.securityfocus.com/bid/23974 ↗
- http://secunia.com/advisories/25675 ↗