Pardus: Samba Denial of Service


 
Thread Tools Search this Thread
Special Forums Cybersecurity Security Advisories (RSS) Pardus: Samba Denial of Service
# 1  
Old 12-29-2008
Pardus: Samba Denial of Service

LinuxSecurity.com: smbd in Samba 3.0.29 through 3.2.4 might allow remote attackers to read arbitrary memory and cause a denial of service via crafted (1) trans, (2) trans2, and (3) nttrans requests, related to a "cut&paste error" that causes an improper bounds check to be performed.

More...
Login or Register to Ask a Question

Previous Thread | Next Thread
Login or Register to Ask a Question
PROFILES(1)							   User Commands						       PROFILES(1)

NAME
profiles - A utility to report and change SIDs in registry files SYNOPSIS
profiles [-v] [-c SID] [-n SID] {file} DESCRIPTION
This tool is part of the samba(7) suite. profiles is a utility that reports and changes SIDs in windows registry files. It currently only supports NT. OPTIONS
file Registry file to view or edit. -v,--verbose Increases verbosity of messages. -c SID1 -n SID2 Change all occurences of SID1 in file by SID2. -h|--help Print a summary of command line options. VERSION
This man page is correct for version 3.0 of the Samba suite. AUTHOR
The original Samba software and related utilities were created by Andrew Tridgell. Samba is now developed by the Samba Team as an Open Source project similar to the way the Linux kernel is developed. The profiles man page was written by Jelmer Vernooij. ATTRIBUTES
See attributes(5) for descriptions of the following attributes: +--------------------+----------------------+ | ATTRIBUTE TYPE | ATTRIBUTE VALUE | +--------------------+----------------------+ |Availability | SUNWsmbar, SUNWsmbau | +--------------------+----------------------+ |Interface Stability | External | +--------------------+----------------------+ NOTES
Source for Samba is available on http://opensolaris.org. Samba(7) delivers the set of four SMF(5) services as can be seen from the following example: $ svcs samba wins winbind swat STATE STIME FMRI disabled Apr_21 svc:/network/samba:default disabled Apr_21 svc:/network/winbind:default disabled Apr_21 svc:/network/wins:default disabled Apr_21 svc:/network/swat:default where the services are: "samba" runs the smbd daemon managing the CIFS sessions "wins" runs the nmbd daemon enabling the browsing (WINS) "winbind" runs the winbindd daemon making the domain idmap "swat" Samba Web Administration Tool is a service providing access to browser-based Samba administration interface and on-line documentation. The service runs on software loopback network interface on port 901/tcp, i.e. opening "http://localhost:901/" in browser will access the SWAT service on local machine. Please note: SWAT uses HTTP Basic Authentication scheme where user name and passwords are sent over the network in clear text. In the SWAT case the user name is root. Transferring such sensitive data is advisable only on the software loopback network interface or over secure networks. Samba 3.0 01/19/2009 PROFILES(1)