To: bugtraqat_private announceat_private scoannmodat_private -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ______________________________________________________________________________ SCO Security Advisory Subject: OpenServer 5.0.5 OpenServer 5.0.6 : Samba security update available avaliable for download. Advisory number: CSSA-2003-SCO.13 Issue date: 2003 July 24 Cross reference: ______________________________________________________________________________ 1. Problem Description This vulnerability, if exploited correctly, leads to an anonymous user gaining root access on a Samba serving system. All versions of Samba up to and including Samba 2.2.8 are vulnerable. An active exploit of the bug has been reported in the wild. The Common Vulnerabilities and Exposures (CVE) project has assigned: CAN-2003-0201:Buffer overflow in the call_trans2open function in trans2.c for Samba 2.2.x before 2.2.8a, 2.0.10 and earlier 2.0.x versions, and Samba-TNG before 0.3.2, allows remote attackers to execute arbitrary code. and CAN-2003-0085: Buffer overflow in the SMB/CIFS packet fragment re-assembly code for SMB daemon (smbd) in Samba before 2.2.8, and Samba-TNG before 0.3.1, allows remote attackers to execute arbitrary code. 2. Vulnerable Supported Versions System Binaries ---------------------------------------------------------------------- OpenServer 5.0.5 distribution 3. Solution The proper solution is to install the latest packages. 4. OpenServer 5.0.5 4.1 Location of Fixed Binaries ftp://ftp.sco.com/pub/updates/OpenServer/CSSA-2003-SCO.13 4.2 Verification MD5 (VOL.000.000) = 175ce3f07683a3a29ce248d1393813ec md5 is available for download from ftp://ftp.sco.com/pub/security/tools 4.3 Installing Fixed Binaries Upgrade the affected binaries with the following sequence: 1) Download the VOL* files to the /tmp directory 2) Run the custom command, specify an install from media images, and specify the /tmp directory as the location of the images. 5. OpenServer 5.0.6 5.1 Location of Fixed Binaries ftp://ftp.sco.com/pub/updates/OpenServer/CSSA-2003-SCO.13 5.2 Verification MD5 (VOL.000.000) = 175ce3f07683a3a29ce248d1393813ec md5 is available for download from ftp://ftp.sco.com/pub/security/tools 5.3 Installing Fixed Binaries Upgrade the affected binaries with the following sequence: 1) Download the VOL* files to the /tmp directory 2) Run the custom command, specify an install from media images, and specify the /tmp directory as the location of the images. 6. References Specific references for this advisory: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2003-0201 http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2003-0085 SCO security resources: http://www.sco.com/support/security/index.html This security fix closes SCO incidents erg875829, fz527531, sr876763. 7. Disclaimer SCO is not responsible for the misuse of any of the information we provide on this website and/or through our security advisories. Our advisories are a service to our customers intended to promote secure installation and use of SCO products. 8. Acknowledgements Thanks to Sebastian Krahmer, SuSE Security Team, and Digital Defense, Inc. who alerted the Samba Team to this vulnerability. ______________________________________________________________________________ -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (SCO_SV) Comment: For info see http://www.gnupg.org iEYEARECAAYFAj8gU6UACgkQaqoBO7ipriFjwgCgl9NTUBvvNB3CGXTQZHtTMhqL mPsAniSHq4CpYn0btHPl9VxOQwuX/Uvl =F+Zb -----END PGP SIGNATURE-----
This archive was generated by hypermail 2b30 : Fri Jul 25 2003 - 13:36:40 PDT