Red Hat Bugzilla – Bug 88123
Another remote anonymous root in Samba
Last modified: 2014-08-31 19:24:49 EDT
A security vulnerability has been found in versions of Samba up to and
including 2.2.8. An anonymous user could exploit the vulnerability to
gain root access on the target machine. Note that this is a different
vulnerability than the one fixed by RHSA-2003:096.
This issue was discovered by Digital Defense when a Samba honeypot was
broken into. Therefore, it is known that this vulnerability is being
exploited in the wild.
This is CAN-2003-0201 and will be RHSA-2003:138
Errata in progress, issue now public
An errata has been issued which should help the problem described in this bug report.
This report is therefore being closed with a resolution of ERRATA. For more information
on the solution and/or where to find the updated files, please follow the link below. You may reopen
this bug report if the solution does not work for you.
The advisory only mentions Enterprise Linux. Just a reminder that patches are
needed for RH 7.3, 8.0, and 9 as well....
Yes, an errata for those distributions is also in progress, this entry was for
tracking the Enterprise Release only.