Home / vulnerabilities USN-460-2.txt
Posted on 23 May 2007
Source : packetstormsecurity.org Link
===========================================================
Ubuntu Security Notice USN-460-2 May 22, 2007
samba regression
http://bugs.debian.org/424629
===========================================================
A security issue affects the following Ubuntu releases:
Ubuntu 7.04
This advisory also applies to the corresponding versions of
Kubuntu, Edubuntu, and Xubuntu.
The problem can be corrected by upgrading your system to the
following package versions:
Ubuntu 7.04:
samba 3.0.24-2ubuntu1.2
In general, a standard system upgrade is sufficient to effect the
necessary changes.
Details follow:
USN-460-1 fixed several vulnerabilities in Samba. The upstream changes
for CVE-2007-2444 had an unexpected side-effect in Feisty. Shares
configured with the "force group" option no longer behaved correctly.
This update corrects the problem. We apologize for the inconvenience.
Original advisory details:
Paul Griffith and Andrew Hogue discovered that Samba did not fully drop
root privileges while translating SIDs. A remote authenticated user
could issue SMB operations during a small window of opportunity and gain
root privileges. (CVE-2007-2444)
Updated packages for Ubuntu 7.04:
Source archives:
http://security.ubuntu.com/ubuntu/pool/main/s/samba/samba_3.0.24-2ubuntu1.2.diff.gz
Size/MD5: 212153 6da96c74db7d1c09e641a152f8ee45e1
http://security.ubuntu.com/ubuntu/pool/main/s/samba/samba_3.0.24-2ubuntu1.2.dsc
Size/MD5: 1491 1a52756b8bbb47f02c26fde99a9bb4ce
http://security.ubuntu.com/ubuntu/pool/main/s/samba/samba_3.0.24.orig.tar.gz
Size/MD5: 17708128 89273f67a6d8067cbbecefaa13747153
Architecture independent packages:
http://security.ubuntu.com/ubuntu/pool/main/s/samba/samba-doc-pdf_3.0.24-2ubuntu1.2_all.deb
Size/MD5: 6602776 f1ed1988f3c100b7fcee8cf79382111f
http://security.ubuntu.com/ubuntu/pool/main/s/samba/samba-doc_3.0.24-2ubuntu1.2_all.deb
Size/MD5: 6917070 34730228bbe70c548b9cc79076f5a90d
amd64 architecture (Athlon64, Opteron, EM64T Xeon)
http://security.ubuntu.com/ubuntu/pool/main/s/samba/libpam-smbpass_3.0.24-2ubuntu1.2_amd64.deb
Size/MD5: 481854 ee8f1b1fbb9ddfcf17159ef2a13cd4d6
http://security.ubuntu.com/ubuntu/pool/main/s/samba/libsmbclient-dev_3.0.24-2ubuntu1.2_amd64.deb
Size/MD5: 116060 ef8a65e691ac3bc3cdc217d251d98c06
http://security.ubuntu.com/ubuntu/pool/main/s/samba/libsmbclient_3.0.24-2ubuntu1.2_amd64.deb
Size/MD5: 868206 9ce9c5d75e3f5892bc942f9e791afbff
http://security.ubuntu.com/ubuntu/pool/main/s/samba/python-samba_3.0.24-2ubuntu1.2_amd64.deb
Size/MD5: 6498044 a0daa795e35041c14e02ca111f853cb4
http://security.ubuntu.com/ubuntu/pool/main/s/samba/samba-common_3.0.24-2ubuntu1.2_amd64.deb
Size/MD5: 2691028 4895ca74acde997d07cdf39548f4d805
http://security.ubuntu.com/ubuntu/pool/main/s/samba/samba-dbg_3.0.24-2ubuntu1.2_amd64.deb
Size/MD5: 12259246 d5c64e437db85e4f5bfb4b02f0169c22
http://security.ubuntu.com/ubuntu/pool/main/s/samba/samba_3.0.24-2ubuntu1.2_amd64.deb
Size/MD5: 3757146 15dff197838e3bbee6baf66044614fc4
http://security.ubuntu.com/ubuntu/pool/main/s/samba/smbclient_3.0.24-2ubuntu1.2_amd64.deb
Size/MD5: 4515276 997576caa9efe64f1e7133b63c2209fd
http://security.ubuntu.com/ubuntu/pool/main/s/samba/smbfs_3.0.24-2ubuntu1.2_amd64.deb
Size/MD5: 479278 efb4d101652daeb2c0694e4789242d52
http://security.ubuntu.com/ubuntu/pool/main/s/samba/swat_3.0.24-2ubuntu1.2_amd64.deb
Size/MD5: 903766 be129c5939f7587c589e0e8bd19c0d2f
http://security.ubuntu.com/ubuntu/pool/main/s/samba/winbind_3.0.24-2ubuntu1.2_amd64.deb
Size/MD5: 2164682 9a72462741f78fcecb5231ebbc4fa728
i386 architecture (x86 compatible Intel/AMD)
http://security.ubuntu.com/ubuntu/pool/main/s/samba/libpam-smbpass_3.0.24-2ubuntu1.2_i386.deb
Size/MD5: 435404 61bed726d70a5da7b415287b65ea879e
http://security.ubuntu.com/ubuntu/pool/main/s/samba/libsmbclient-dev_3.0.24-2ubuntu1.2_i386.deb
Size/MD5: 116068 b1b17947b46671789d3e65f444aa85ff
http://security.ubuntu.com/ubuntu/pool/main/s/samba/libsmbclient_3.0.24-2ubuntu1.2_i386.deb
Size/MD5: 793818 042c7cd1cb0d6be9c6b2b041c0462107
http://security.ubuntu.com/ubuntu/pool/main/s/samba/python-samba_3.0.24-2ubuntu1.2_i386.deb
Size/MD5: 5907188 069670d6e0d21aae088efbad12e60974
http://security.ubuntu.com/ubuntu/pool/main/s/samba/samba-common_3.0.24-2ubuntu1.2_i386.deb
Size/MD5: 2437476 fe052cc018a5c926b4ece39f7fe60904
http://security.ubuntu.com/ubuntu/pool/main/s/samba/samba-dbg_3.0.24-2ubuntu1.2_i386.deb
Size/MD5: 11858394 c452ee109a0b3d939eae2936e21880e0
http://security.ubuntu.com/ubuntu/pool/main/s/samba/samba_3.0.24-2ubuntu1.2_i386.deb
Size/MD5: 3341020 3ce55f95e53074e863f3cae5ced65516
http://security.ubuntu.com/ubuntu/pool/main/s/samba/smbclient_3.0.24-2ubuntu1.2_i386.deb
Size/MD5: 4015590 e75fbb06c321388db89d606e4683c88f
http://security.ubuntu.com/ubuntu/pool/main/s/samba/smbfs_3.0.24-2ubuntu1.2_i386.deb
Size/MD5: 426918 1d88ff8f4cd252ebf84a91832ae69923
http://security.ubuntu.com/ubuntu/pool/main/s/samba/swat_3.0.24-2ubuntu1.2_i386.deb
Size/MD5: 819738 fbd463381a1086b97507501587b15d06
http://security.ubuntu.com/ubuntu/pool/main/s/samba/winbind_3.0.24-2ubuntu1.2_i386.deb
Size/MD5: 1924906 76636feed1ebc02974a81c8d792eaccc
powerpc architecture (Apple Macintosh G3/G4/G5)
http://security.ubuntu.com/ubuntu/pool/main/s/samba/libpam-smbpass_3.0.24-2ubuntu1.2_powerpc.deb
Size/MD5: 477712 077c3c5fb3684e84de52c0679bf95ba8
http://security.ubuntu.com/ubuntu/pool/main/s/samba/libsmbclient-dev_3.0.24-2ubuntu1.2_powerpc.deb
Size/MD5: 116064 285cbcff21f77ec169ba95b3fd8f04b1
http://security.ubuntu.com/ubuntu/pool/main/s/samba/libsmbclient_3.0.24-2ubuntu1.2_powerpc.deb
Size/MD5: 859006 328330da8f556219f969782b73a05d55
http://security.ubuntu.com/ubuntu/pool/main/s/samba/python-samba_3.0.24-2ubuntu1.2_powerpc.deb
Size/MD5: 6536378 e92bcf3417bb11e10ff10c27225b3415
http://security.ubuntu.com/ubuntu/pool/main/s/samba/samba-common_3.0.24-2ubuntu1.2_powerpc.deb
Size/MD5: 2652786 1948f2f71806f948d10e6d852f67b81d
http://security.ubuntu.com/ubuntu/pool/main/s/samba/samba-dbg_3.0.24-2ubuntu1.2_powerpc.deb
Size/MD5: 12571552 c79e1aeef927ef75004f8dea6e2809e4
http://security.ubuntu.com/ubuntu/pool/main/s/samba/samba_3.0.24-2ubuntu1.2_powerpc.deb
Size/MD5: 3726154 7d7f5bf3d8143f5ffa4e9e2a63806542
http://security.ubuntu.com/ubuntu/pool/main/s/samba/smbclient_3.0.24-2ubuntu1.2_powerpc.deb
Size/MD5: 4453980 a791426c9b3b4ac3007ef44e1c73e699
http://security.ubuntu.com/ubuntu/pool/main/s/samba/smbfs_3.0.24-2ubuntu1.2_powerpc.deb
Size/MD5: 486838 59669eb741b45c186fe16526119d782a
http://security.ubuntu.com/ubuntu/pool/main/s/samba/swat_3.0.24-2ubuntu1.2_powerpc.deb
Size/MD5: 893204 8c05c4a8b66a722701e2d78187d49477
http://security.ubuntu.com/ubuntu/pool/main/s/samba/winbind_3.0.24-2ubuntu1.2_powerpc.deb
Size/MD5: 2144258 83908708c55d4181859e0feb148dde67
sparc architecture (Sun SPARC/UltraSPARC)
http://security.ubuntu.com/ubuntu/pool/main/s/samba/libpam-smbpass_3.0.24-2ubuntu1.2_sparc.deb
Size/MD5: 441942 c1c155969d490f566aa0f413a343a9e1
http://security.ubuntu.com/ubuntu/pool/main/s/samba/libsmbclient-dev_3.0.24-2ubuntu1.2_sparc.deb
Size/MD5: 116060 141c0d479be2682e20297979ccbc90e8
http://security.ubuntu.com/ubuntu/pool/main/s/samba/libsmbclient_3.0.24-2ubuntu1.2_sparc.deb
Size/MD5: 796330 ecb5923067b06e44646d5bf5f2747803
http://security.ubuntu.com/ubuntu/pool/main/s/samba/python-samba_3.0.24-2ubuntu1.2_sparc.deb
Size/MD5: 5932424 9d4c506b28f34b816adb6bc0237a37b4
http://security.ubuntu.com/ubuntu/pool/main/s/samba/samba-common_3.0.24-2ubuntu1.2_sparc.deb
Size/MD5: 2407996 06f0808891b90ae328e83cc8fceb7c30
http://security.ubuntu.com/ubuntu/pool/main/s/samba/samba-dbg_3.0.24-2ubuntu1.2_sparc.deb
Size/MD5: 10878116 47d21febc3f0d1a414e1ef4564fab09e
http://security.ubuntu.com/ubuntu/pool/main/s/samba/samba_3.0.24-2ubuntu1.2_sparc.deb
Size/MD5: 3344900 258dda921d636448de7fedab29003261
http://security.ubuntu.com/ubuntu/pool/main/s/samba/smbclient_3.0.24-2ubuntu1.2_sparc.deb
Size/MD5: 3962018 fdf2ccbff62ed1dde783c4bf8c127230
http://security.ubuntu.com/ubuntu/pool/main/s/samba/smbfs_3.0.24-2ubuntu1.2_sparc.deb
Size/MD5: 435762 da146cdf227e40924842168b0b0688d3
http://security.ubuntu.com/ubuntu/pool/main/s/samba/swat_3.0.24-2ubuntu1.2_sparc.deb
Size/MD5: 804986 f042b6a7afeec6c4ca1f1bc85fdb45cb
http://security.ubuntu.com/ubuntu/pool/main/s/samba/winbind_3.0.24-2ubuntu1.2_sparc.deb
Size/MD5: 1922850 f093eef0428fb16f2d7c1bc3f43c5cb2
