Bug 239429 (CVE-2007-2446) - CVE-2007-2446 samba heap overflows
Summary: CVE-2007-2446 samba heap overflows
Keywords:
Status: CLOSED ERRATA
Alias: CVE-2007-2446
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
high
high
Target Milestone: ---
Assignee: Red Hat Product Security
QA Contact:
URL:
Whiteboard:
Depends On: 239430 239431 239432 239433
Blocks:
TreeView+ depends on / blocked
 
Reported: 2007-05-08 12:40 UTC by Mark J. Cox
Modified: 2021-08-11 13:11 UTC (History)
4 users (show)

Fixed In Version: RHSA-2007-0354
Clone Of:
Environment:
Last Closed: 2007-05-14 15:21:07 UTC
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHSA-2007:0354 0 normal SHIPPED_LIVE Critical: samba security update 2008-01-09 19:22:18 UTC

Comment 1 Mark J. Cox 2007-05-11 09:07:42 UTC 
According to Samba:

"Various bugs in Samba's NDR parsing can allow a user
to send specially crafted MS-RPC requests that will
overwrite the heap space with user defined data."

These will affect Samba as shipped in Red Hat Enterprise Linux 2.1, 3, 4, 5.
Comment 2 Mark J. Cox 2007-05-14 14:05:08 UTC 
removing embargo, now public
Comment 3 Red Hat Bugzilla 2007-05-14 15:21:07 UTC 
An advisory has been issued which should help the problem
described in this bug report. This report is therefore being
closed with a resolution of ERRATA. For more information
on the solution and/or where to find the updated files,
please follow the link below. You may reopen this bug report
if the solution does not work for you.

http://rhn.redhat.com/errata/RHSA-2007-0354.html
Note You need to log in before you can comment on or make changes to this bug.