Samba Server加密口令缓冲区溢出漏洞发布时间：2002-11-20 更新时间：2002-12-05 严重程度：高 威胁程度：远程管理员权限 错误类型：边界检查错误 利用方式：服务器模式 BUGTRAQ ID：6210 受影响系统 Samba Samba 2.2.2详细描述 Samba的修改口令进程存在缓冲区溢出漏洞。 由于没有很好检查用户输入数据的边界检查，smbd在加密一个超长口令的时候会引发缓冲溢出。 使用pam_smbpass PAM模块实现的应用程序可以本地利用，也可能进行远程溢出攻击，以超级用户权限指向任意代码。 测试代码 无 解决方案 Samba Samba 2.2.2: Samba Upgrade Samba 2.2.7 http://download.samba.org/samba/ftp/ RedHat RPM samba-2.2.7-1.7.3.i386.rpm ftp://updates.redhat.com/7.3/en/os/i386/samba-2.2.7-1.7.3.i386.rpm OpenPKG RPM samba-2.2.2-1.0.1.src.rpm ftp://ftp.openpkg.org/release/1.0/UPD/samba-2.2.2-1.0.1.src.rpm RedHat RPM samba-2.2.7-1.7.3.src.rpm ftp://updates.redhat.com/7.3/en/os/SRPMS/samba-2.2.7-1.7.3.src.rpm RedHat RPM samba-2.2.7-2.i386.rpm ftp://updates.redhat.com/8.0/en/os/i386/samba-2.2.7-2.i386.rpm RedHat RPM samba-2.2.7-2.src.rpm ftp://updates.redhat.com/8.0/en/os/SRPMS/samba-2.2.7-2.src.rpm RedHat RPM samba-client-2.2.7-1.7.3.i386.rpm ftp://updates.redhat.com/7.3/en/os/i386/samba-client-2.2.7- 1.7.3.i386.rpm RedHat RPM samba-client-2.2.7-2.i386.rpm ftp://updates.redhat.com/8.0/en/os/i386/samba-client-2.2.7-2.i386.rpm RedHat RPM samba-common-2.2.7-1.7.3.i386.rpm ftp://updates.redhat.com/7.3/en/os/i386/samba-common-2.2.7- 1.7.3.i386.rpm RedHat RPM samba-common-2.2.7-2.i386.rpm ftp://updates.redhat.com/8.0/en/os/i386/samba-common-2.2.7-2.i386.rpm RedHat RPM samba-swat-2.2.7-1.7.3.i386.rpm ftp://updates.redhat.com/7.3/en/os/i386/samba-swat-2.2.7- 1.7.3.i386.rpm RedHat RPM samba-swat-2.2.7-2.i386.rpm ftp://updates.redhat.com/8.0/en/os/i386/samba-swat-2.2.7-2.i386.rpm Conectiva RPM samba-2.0.9-2U60_2cl.i386.rpm ftp://atualizacoes.conectiva.com.br/6.0/RPMS/samba-2.0.9- 2U60_2cl.i386.rpm Conectiva RPM samba-2.2.1a-1U70_2cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/samba-2.2.1a- 1U70_2cl.i386.rpm Conectiva RPM samba-2.2.3a-2U80_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/8/RPMS/samba-2.2.3a- 2U80_1cl.i386.rpm Conectiva RPM samba-clients-2.0.9-2U60_2cl.i386.rpm ftp://atualizacoes.conectiva.com.br/6.0/RPMS/samba-clients-2.0.9- 2U60_2cl.i386.rpm Conectiva RPM samba-clients-2.2.1a-1U70_2cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/samba-clients-2.2.1a- 1U70_2cl.i386.rpm Conectiva RPM samba-clients-2.2.3a-2U80_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/8/RPMS/samba-clients-2.2.3a- 2U80_1cl.i386.rpm Conectiva RPM samba-codepagesource-2.2.1a-1U70_2cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/samba-codepagesource- 2.2.1a-1U70_2cl.i386.rpm Conectiva RPM samba-codepagesource-2.2.3a-2U80_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/8/RPMS/samba-codepagesource- 2.2.3a-2U80_1cl.i386.rpm Conectiva RPM samba-common-2.2.1a-1U70_2cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/samba-common-2.2.1a- 1U70_2cl.i386.rpm Conectiva RPM samba-common-2.2.3a-2U80_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/8/RPMS/samba-common-2.2.3a- 2U80_1cl.i386.rpm Conectiva RPM samba-doc-2.0.9-2U60_2cl.i386.rpm ftp://atualizacoes.conectiva.com.br/6.0/RPMS/samba-doc-2.0.9- 2U60_2cl.i386.rpm Conectiva RPM samba-doc-2.2.1a-1U70_2cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/samba-doc-2.2.1a- 1U70_2cl.i386.rpm Conectiva RPM samba-doc-2.2.3a-2U80_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/8/RPMS/samba-doc-2.2.3a- 2U80_1cl.i386.rpm Conectiva RPM samba-swat-2.0.9-2U60_2cl.i386.rpm ftp://atualizacoes.conectiva.com.br/6.0/RPMS/samba-swat-2.0.9- 2U60_2cl.i386.rpm Conectiva RPM samba-swat-2.2.1a-1U70_2cl.i386.rpm ftp://atualizacoes.conectiva.com.br/7.0/RPMS/samba-swat-2.2.1a- 1U70_2cl.i386.rpm Conectiva RPM samba-swat-2.2.3a-2U80_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/8/RPMS/samba-swat-2.2.3a- 2U80_1cl.i386.rpm Trustix RPM samba-2.2.7-2tr.i586.rpm ftp://ftp.trustix.net/pub/Trustix/updates/1.5/RPMS/ Trustix RPM samba-2.2.7-2tr.src.rpm ftp://ftp.trustix.net/pub/Trustix/updates/1.5/SRPMS/ Trustix RPM samba-client-2.2.7-2tr.i586.rpm ftp://ftp.trustix.net/pub/Trustix/updates/1.5/RPMS/ Trustix RPM samba-common-2.2.7-2tr.i586.rpm ftp://ftp.trustix.net/pub/Trustix/updates/1.5/RPMS/ MandrakeSoft RPM samba-2.2.2-3.3mdk.i586.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Linux 8.1 MandrakeSoft RPM samba-2.2.2-3.3mdk.ia64.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Linux 8.1/IA64 MandrakeSoft RPM samba-client-2.2.2-3.3mdk.i586.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Linux 8.1 MandrakeSoft RPM samba-client-2.2.2-3.3mdk.ia64.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Linux 8.1/IA64 MandrakeSoft RPM samba-common-2.2.2-3.3mdk.i586.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Linux 8.1 MandrakeSoft RPM samba-common-2.2.2-3.3mdk.ia64.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Linux 8.1/IA64 MandrakeSoft RPM samba-doc-2.2.2-3.3mdk.i586.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Linux 8.1 MandrakeSoft RPM samba-doc-2.2.2-3.3mdk.ia64.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Linux 8.1/IA64 Samba Samba 2.2.3: Samba Upgrade Samba 2.2.7 http://download.samba.org/samba/ftp/ RedHat RPM samba-2.2.7-1.7.3.i386.rpm ftp://updates.redhat.com/7.3/en/os/i386/samba-2.2.7-1.7.3.i386.rpm MandrakeSoft RPM samba-winbind-2.2.3a-10.1mdk.i586.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Linux 8.2 MandrakeSoft RPM samba-winbind-2.2.3a-10.1mdk.ppc.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Linux 8.2/PPC RedHat RPM samba-2.2.7-1.7.3.src.rpm ftp://updates.redhat.com/7.3/en/os/SRPMS/samba-2.2.7-1.7.3.src.rpm RedHat RPM samba-2.2.7-2.i386.rpm ftp://updates.redhat.com/8.0/en/os/i386/samba-2.2.7-2.i386.rpm RedHat RPM samba-2.2.7-2.src.rpm ftp://updates.redhat.com/8.0/en/os/SRPMS/samba-2.2.7-2.src.rpm RedHat RPM samba-client-2.2.7-1.7.3.i386.rpm ftp://updates.redhat.com/7.3/en/os/i386/samba-client-2.2.7- 1.7.3.i386.rpm RedHat RPM samba-client-2.2.7-2.i386.rpm ftp://updates.redhat.com/8.0/en/os/i386/samba-client-2.2.7-2.i386.rpm RedHat RPM samba-common-2.2.7-1.7.3.i386.rpm ftp://updates.redhat.com/7.3/en/os/i386/samba-common-2.2.7- 1.7.3.i386.rpm RedHat RPM samba-common-2.2.7-2.i386.rpm ftp://updates.redhat.com/8.0/en/os/i386/samba-common-2.2.7-2.i386.rpm RedHat RPM samba-swat-2.2.7-1.7.3.i386.rpm ftp://updates.redhat.com/7.3/en/os/i386/samba-swat-2.2.7- 1.7.3.i386.rpm RedHat RPM samba-swat-2.2.7-2.i386.rpm ftp://updates.redhat.com/8.0/en/os/i386/samba-swat-2.2.7-2.i386.rpm Trustix RPM samba-2.2.7-2tr.i586.rpm ftp://ftp.trustix.net/pub/Trustix/updates/1.5/RPMS/ Trustix RPM samba-2.2.7-2tr.src.rpm ftp://ftp.trustix.net/pub/Trustix/updates/1.5/SRPMS/ Trustix RPM samba-client-2.2.7-2tr.i586.rpm ftp://ftp.trustix.net/pub/Trustix/updates/1.5/RPMS/ Trustix RPM samba-common-2.2.7-2tr.i586.rpm ftp://ftp.trustix.net/pub/Trustix/updates/1.5/RPMS/ MandrakeSoft RPM nss_wins-2.2.3a-10.1mdk.i586.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Linux 8.2 MandrakeSoft RPM nss_wins-2.2.3a-10.1mdk.ppc.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Linux 8.2/PPC MandrakeSoft RPM samba-2.2.3a-10.1mdk.i586.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Linux 8.2 MandrakeSoft RPM samba-2.2.3a-10.1mdk.ppc.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Linux 8.2/PPC MandrakeSoft RPM samba-client-2.2.3a-10.1mdk.i586.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Linux 8.2 MandrakeSoft RPM samba-client-2.2.3a-10.1mdk.ppc.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Linux 8.2/PPC MandrakeSoft RPM samba-common-2.2.3a-10.1mdk.i586.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Linux 8.2 MandrakeSoft RPM samba-common-2.2.3a-10.1mdk.ppc.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Linux 8.2/PPC MandrakeSoft RPM samba-doc-2.2.3a-10.1mdk.i586.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Linux 8.2 MandrakeSoft RPM samba-doc-2.2.3a-10.1mdk.ppc.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Linux 8.2/PPC MandrakeSoft RPM samba-swat-2.2.3a-10.1mdk.i586.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Linux 8.2 MandrakeSoft RPM samba-swat-2.2.3a-10.1mdk.ppc.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Linux 8.2/PPC Samba Samba 2.2.4: Samba Upgrade Samba 2.2.7 http://download.samba.org/samba/ftp/ RedHat RPM samba-2.2.7-1.7.3.i386.rpm ftp://updates.redhat.com/7.3/en/os/i386/samba-2.2.7-1.7.3.i386.rpm RedHat RPM samba-2.2.7-1.7.3.src.rpm ftp://updates.redhat.com/7.3/en/os/SRPMS/samba-2.2.7-1.7.3.src.rpm RedHat RPM samba-2.2.7-2.i386.rpm ftp://updates.redhat.com/8.0/en/os/i386/samba-2.2.7-2.i386.rpm RedHat RPM samba-2.2.7-2.src.rpm ftp://updates.redhat.com/8.0/en/os/SRPMS/samba-2.2.7-2.src.rpm RedHat RPM samba-client-2.2.7-1.7.3.i386.rpm ftp://updates.redhat.com/7.3/en/os/i386/samba-client-2.2.7- 1.7.3.i386.rpm RedHat RPM samba-client-2.2.7-2.i386.rpm ftp://updates.redhat.com/8.0/en/os/i386/samba-client-2.2.7-2.i386.rpm RedHat RPM samba-common-2.2.7-1.7.3.i386.rpm ftp://updates.redhat.com/7.3/en/os/i386/samba-common-2.2.7- 1.7.3.i386.rpm RedHat RPM samba-common-2.2.7-2.i386.rpm ftp://updates.redhat.com/8.0/en/os/i386/samba-common-2.2.7-2.i386.rpm RedHat RPM samba-swat-2.2.7-1.7.3.i386.rpm ftp://updates.redhat.com/7.3/en/os/i386/samba-swat-2.2.7- 1.7.3.i386.rpm RedHat RPM samba-swat-2.2.7-2.i386.rpm ftp://updates.redhat.com/8.0/en/os/i386/samba-swat-2.2.7-2.i386.rpm Trustix RPM samba-2.2.7-2tr.i586.rpm ftp://ftp.trustix.net/pub/Trustix/updates/1.5/RPMS/ Trustix RPM samba-2.2.7-2tr.src.rpm ftp://ftp.trustix.net/pub/Trustix/updates/1.5/SRPMS/ Trustix RPM samba-client-2.2.7-2tr.i586.rpm ftp://ftp.trustix.net/pub/Trustix/updates/1.5/RPMS/ Trustix RPM samba-common-2.2.7-2tr.i586.rpm ftp://ftp.trustix.net/pub/Trustix/updates/1.5/RPMS/ Samba Samba 2.2.5: Samba Upgrade Samba 2.2.7 http://download.samba.org/samba/ftp/ RedHat RPM samba-2.2.7-1.7.3.i386.rpm ftp://updates.redhat.com/7.3/en/os/i386/samba-2.2.7-1.7.3.i386.rpm OpenPKG RPM samba-2.2.5-1.1.1.src.rpm ftp://ftp.openpkg.org/release/1.1/UPD/samba-2.2.5-1.1.1.src.rpm RedHat RPM samba-2.2.7-1.7.3.src.rpm ftp://updates.redhat.com/7.3/en/os/SRPMS/samba-2.2.7-1.7.3.src.rpm RedHat RPM samba-2.2.7-2.i386.rpm ftp://updates.redhat.com/8.0/en/os/i386/samba-2.2.7-2.i386.rpm RedHat RPM samba-2.2.7-2.src.rpm ftp://updates.redhat.com/8.0/en/os/SRPMS/samba-2.2.7-2.src.rpm RedHat RPM samba-client-2.2.7-1.7.3.i386.rpm ftp://updates.redhat.com/7.3/en/os/i386/samba-client-2.2.7- 1.7.3.i386.rpm RedHat RPM samba-client-2.2.7-2.i386.rpm ftp://updates.redhat.com/8.0/en/os/i386/samba-client-2.2.7-2.i386.rpm RedHat RPM samba-common-2.2.7-1.7.3.i386.rpm ftp://updates.redhat.com/7.3/en/os/i386/samba-common-2.2.7- 1.7.3.i386.rpm RedHat RPM samba-common-2.2.7-2.i386.rpm ftp://updates.redhat.com/8.0/en/os/i386/samba-common-2.2.7-2.i386.rpm RedHat RPM samba-swat-2.2.7-1.7.3.i386.rpm ftp://updates.redhat.com/7.3/en/os/i386/samba-swat-2.2.7- 1.7.3.i386.rpm RedHat RPM samba-swat-2.2.7-2.i386.rpm ftp://updates.redhat.com/8.0/en/os/i386/samba-swat-2.2.7-2.i386.rpm Trustix RPM samba-2.2.7-2tr.i586.rpm ftp://ftp.trustix.net/pub/Trustix/updates/1.5/RPMS/ Trustix RPM samba-2.2.7-2tr.src.rpm ftp://ftp.trustix.net/pub/Trustix/updates/1.5/SRPMS/ Trustix RPM samba-client-2.2.7-2tr.i586.rpm ftp://ftp.trustix.net/pub/Trustix/updates/1.5/RPMS/ Trustix RPM samba-common-2.2.7-2tr.i586.rpm ftp://ftp.trustix.net/pub/Trustix/updates/1.5/RPMS/ Samba Samba 2.2.6: Samba Upgrade Samba 2.2.7 http://download.samba.org/samba/ftp/ RedHat RPM samba-2.2.7-1.7.3.i386.rpm ftp://updates.redhat.com/7.3/en/os/i386/samba-2.2.7-1.7.3.i386.rpm MandrakeSoft RPM samba-winbind-2.2.7-2.1mdk.i586.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Linux 9.0 OpenPKG RPM samba-2.2.7-20021126.src.rpm ftp://ftp.openpkg.org/current/SRC/samba-2.2.7-20021126.src.rpm RedHat RPM samba-2.2.7-1.7.3.src.rpm ftp://updates.redhat.com/7.3/en/os/SRPMS/samba-2.2.7-1.7.3.src.rpm RedHat RPM samba-2.2.7-2.i386.rpm ftp://updates.redhat.com/8.0/en/os/i386/samba-2.2.7-2.i386.rpm RedHat RPM samba-2.2.7-2.src.rpm ftp://updates.redhat.com/8.0/en/os/SRPMS/samba-2.2.7-2.src.rpm RedHat RPM samba-client-2.2.7-1.7.3.i386.rpm ftp://updates.redhat.com/7.3/en/os/i386/samba-client-2.2.7- 1.7.3.i386.rpm RedHat RPM samba-client-2.2.7-2.i386.rpm ftp://updates.redhat.com/8.0/en/os/i386/samba-client-2.2.7-2.i386.rpm RedHat RPM samba-common-2.2.7-1.7.3.i386.rpm ftp://updates.redhat.com/7.3/en/os/i386/samba-common-2.2.7- 1.7.3.i386.rpm RedHat RPM samba-common-2.2.7-2.i386.rpm ftp://updates.redhat.com/8.0/en/os/i386/samba-common-2.2.7-2.i386.rpm RedHat RPM samba-swat-2.2.7-1.7.3.i386.rpm ftp://updates.redhat.com/7.3/en/os/i386/samba-swat-2.2.7- 1.7.3.i386.rpm RedHat RPM samba-swat-2.2.7-2.i386.rpm ftp://updates.redhat.com/8.0/en/os/i386/samba-swat-2.2.7-2.i386.rpm Trustix RPM samba-2.2.7-2tr.i586.rpm ftp://ftp.trustix.net/pub/Trustix/updates/1.5/RPMS/ Trustix RPM samba-2.2.7-2tr.src.rpm ftp://ftp.trustix.net/pub/Trustix/updates/1.5/SRPMS/ Trustix RPM samba-client-2.2.7-2tr.i586.rpm ftp://ftp.trustix.net/pub/Trustix/updates/1.5/RPMS/ Trustix RPM samba-common-2.2.7-2tr.i586.rpm ftp://ftp.trustix.net/pub/Trustix/updates/1.5/RPMS/ MandrakeSoft RPM nss_wins-2.2.7-2.1mdk.i586.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Linux 9.0 MandrakeSoft RPM samba-client-2.2.7-2.1mdk.i586.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Linux 9.0 MandrakeSoft RPM samba-common-2.2.7-2.1mdk.i586.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Linux 9.0 MandrakeSoft RPM samba-doc-2.2.7-2.1mdk.i586.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Linux 9.0 MandrakeSoft RPM samba-server-2.2.7-2.1mdk.i586.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Linux 9.0 MandrakeSoft RPM samba-swat-2.2.7-2.1mdk.i586.rpm http://www.mandrakesecure.net/en/ftp.php 相关信息 发现者：Steve Langasek、Eloy Paris 相关资料：http://online.securityfocus.com/advisories/4710 http://online.securityfocus.com/advisories/4750 http://online.securityfocus.com/advisories/4719 http://online.securityfocus.com/ |
