Samba “client/mount.cifs.c” 远程拒绝服务漏洞

漏洞信息详情

Samba是一套实现SMB(Server Messages Block)协议，跨平台进行文件共享和打印共享服务的开源程序。

Samba服务器上smbfs文件系统的mount.cifs程序中client/mount.cifs.c脚本没有充分地检查(1) 设备名称和(2) 挂载点字符串字符有效性，本地用户可以通过特制的字符串，导致拒绝服务(mtab损坏)。

目前厂商已经发布了升级补丁以修复这个安全问题，补丁下载链接：

Debian Linux 5.0 ia-64

Debian samba-common_3.2.5-4lenny9_ia64.deb

http://security.debian.org/pool/updates/main/s/samba/samba-common_3.2. 5-4lenny9_ia64.deb

Debian Linux 5.0 armel

Debian samba_3.2.5-4lenny9_armel.deb

http://security.debian.org/pool/updates/main/s/samba/samba_3.2.5-4lenn y9_armel.deb

Debian smbfs_3.2.5-4lenny9_armel.deb

http://security.debian.org/pool/updates/main/s/samba/smbfs_3.2.5-4lenn y9_armel.deb

Debian winbind_3.2.5-4lenny9_armel.deb

http://security.debian.org/pool/updates/main/s/samba/winbind_3.2.5-4le nny9_armel.deb

Debian Linux 5.0 mips

Debian samba-tools_3.2.5-4lenny9_mips.deb

http://security.debian.org/pool/updates/main/s/samba/samba-tools_3.2.5 -4lenny9_mips.deb

Debian Linux 5.0 ia-32

Debian winbind_3.2.5-4lenny9_i386.deb

http://security.debian.org/pool/updates/main/s/samba/winbind_3.2.5-4le nny9_i386.deb

来源: git.samba.org

链接:http://git.samba.org/?p=samba.git;a=commit;h=a065c177dfc8f968775593ba00dffafeebb2e054