Security

« Sun Alert 102934... | Main | Sun Alert 103000 JSP... »

24 Oct 2007 Sun Alert 102964 Multiple Security Vulnerabilities in samba(7) May Allow Remote Code Execution, Elevation of Privileges, Remote Shell Command Execution, or Denial of Service (DoS)
posted by security in Alerts

Product: Solaris 9 Operating System, Solaris 10 Operating System, SAMBA

Multiple security vulnerabilities in the Samba (samba(7)) software for Solaris may allow a local or remote user to issue unauthorized Samba operations or to execute arbitrary code or commands with elevated privileges. In addition, it may be possible for a remote authenticated user to cause the Samba service to consume excessive amounts of CPU and memory, resulting in a Denial of Service (DoS) to the system.

These issues are described in the following documents:

CVE-2007-2444 at http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2444

CVE-2007-2446 at http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2446

CVE-2007-2447 at http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2447

CVE-2007-0452 at http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0452

Avoidance: Patch, Workaround

State: Resolved

First released: 14-Jun-2007

Sun Alert Link: http://sunsolve.sun.com/search/document.do?assetkey=1-26-102964-1

Permalink | Comments [0]

Trackback URL: http://blogs.sun.com/security/entry/sun_alert_102964_multiple_security