LinuxSecurity.com: J. David Hester discovered that Samba incorrectly handled users that lackhome directories when the automated [homes] share is enabled. Anauthenticated user could connect to that share name and gain access to thewhole filesystem. (CVE-2009-2813)Tim Prouty discovered that the smbd daemon in Samba incorrectly handledcertain unexpected network replies. A remote attacker could send maliciousreplies to the server and cause smbd to use all available CPU, leading to adenial of service. (CVE-2009-2906)Ronald Volgers discovered that the mount.cifs utility, when installed as asetuid program, would not verify user permissions before opening acredentials file. A local user could exploit this to use or read thecontents of unauthorized credential files. (CVE-2009-2948)Reinhard Nil discovered that the smbclient utility contained format stringvulnerabilities in its file name handling. Because of security features inUbuntu, exploitation of this vulnerability is limited. If a user orautomated system were tricked into processing a specially crafted filename, smbclient could be made to crash, possibly leading to a denial ofservice. This only affected Ubuntu 8.10. (CVE-2009-1886)Jeremy Allison discovered that the smbd daemon in Samba incorrectly handledpermissions to modify access control lists when dos filemode is enabled. Aremote attacker could exploit this to modify access control lists. Thisonly affected Ubuntu 8.10 and Ubuntu 9.04. (CVE-2009-1886)

More...