Login or Register to Ask a Question and Join Our Community


Security Advisories (RSS)

USN-680-1: Samba vulnerability

Login to Discuss or Reply to this Discussion in Our Community

 
Thread Tools Search this Thread
Special Forums Cybersecurity Security Advisories (RSS) USN-680-1: Samba vulnerability
# 1  
Old 11-27-2008
USN-680-1: Samba vulnerability
Referenced CVEs:
CVE-2008-4314


Description:
=========================================================== Ubuntu Security Notice USN-680-1 November 27, 2008 samba vulnerability CVE-2008-4314 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 8.10 This advisory also applies to the corresponding versions of Kubuntu, Edubuntu, and Xubuntu. The problem can be corrected by upgrading your system to the following package versions: Ubuntu 8.10: samba 2:3.2.3-1ubuntu3.3 In general, a standard system upgrade is sufficient to effect the necessary changes. Details follow: It was discovered that Samba did not properly perform bounds checking in certain operations. A remote attacker could possibly exploit this to read arbitrary memory contents of the smb process, which could contain sensitive infomation or possibly have other impacts, such as a denial of service.





More...
Login or Register to Ask a Question

Previous Thread | Next Thread
Login or Register to Ask a Question

LEARN ABOUT DEBIAN

tdbbackup.tdbtools

TDBBACKUP(8)						    System Administration tools 					      TDBBACKUP(8)

NAME

       tdbbackup - tool for backing up and for validating the integrity of samba .tdb files

SYNOPSIS

       tdbbackup [-s suffix] [-v] [-h]

DESCRIPTION

       This tool is part of the samba(1) suite.

       tdbbackup is a tool that may be used to backup samba .tdb files. This tool may also be used to verify the integrity of the .tdb files prior
       to samba startup or during normal operation. If it finds file damage and it finds a prior backup the backup file will be restored.

OPTIONS

       -h
	   Get help information.

       -s suffix
	   The -s option allows the adminisistrator to specify a file backup extension. This way it is possible to keep a history of tdb backup
	   files by using a new suffix for each backup.

       -v
	   The -v will check the database for damages (currupt data) which if detected causes the backup to be restored.

COMMANDS

       GENERAL INFORMATION

       The tdbbackup utility can safely be run at any time. It was designed so that it can be used at any time to validate the integrity of tdb
       files, even during Samba operation. Typical usage for the command will be:

       tdbbackup [-s suffix] *.tdb

       Before restarting samba the following command may be run to validate .tdb files:

       tdbbackup -v [-s suffix] *.tdb

       Samba .tdb files are stored in various locations, be sure to run backup all .tdb file on the system. Important files includes:

       o    secrets.tdb - usual location is in the /usr/local/samba/private directory, or on some systems in /etc/samba.

       o    passdb.tdb - usual location is in the /usr/local/samba/private directory, or on some systems in /etc/samba.

       o    *.tdb located in the /usr/local/samba/var directory or on some systems in the /var/cache or /var/lib/samba directories.

VERSION

       This man page is correct for version 3 of the Samba suite.

AUTHOR

       The original Samba software and related utilities were created by Andrew Tridgell. Samba is now developed by the Samba Team as an Open
       Source project similar to the way the Linux kernel is developed.

       The tdbbackup man page was written by John H Terpstra.

Samba 3.6							    05/28/2012							      TDBBACKUP(8)