A security vulnerability has been found in versions of Samba up to and including 2.2.8. An anonymous user could exploit the vulnerability to gain root access on the target machine. Note that this is a different vulnerability than the one fixed by RHSA-2003:096. This issue was discovered by Digital Defense when a Samba honeypot was broken into. Therefore, it is known that this vulnerability is being exploited in the wild. This is CAN-2003-0201 and will be RHSA-2003:138
Errata in progress, issue now public
An errata has been issued which should help the problem described in this bug report. This report is therefore being closed with a resolution of ERRATA. For more information on the solution and/or where to find the updated files, please follow the link below. You may reopen this bug report if the solution does not work for you. http://rhn.redhat.com/errata/RHSA-2003-138.html
The advisory only mentions Enterprise Linux. Just a reminder that patches are needed for RH 7.3, 8.0, and 9 as well....
Yes, an errata for those distributions is also in progress, this entry was for tracking the Enterprise Release only.