Samba REG写文件条件竞争漏洞发布时间：2003-03-15 更新时间：2003-03-25 严重程度：高 威胁程度：权限提升 错误类型：竞争条件 利用方式：客户机模式 BUGTRAQ ID：7107 受影响系统 Samba Samba 2.0 .0详细描述 Samba存在一个竞争条件漏洞。 Samba在写reg文件时由于产生临时文件不安全，攻击者可以通过建立符号连接指向系统重要文件，当程序执行的时候可导致目标文件被破坏，可能利用提升权限。 目前没有提供详细漏洞细节。 解决方案 Samba Samba 2.0 .0: Samba Upgrade Samba 2.2.8 http://download.samba.org/samba/ftp/ Samba Samba 2.0.1: Samba Upgrade Samba 2.2.8 http://download.samba.org/samba/ftp/ Samba Samba 2.0.2: Samba Upgrade Samba 2.2.8 http://download.samba.org/samba/ftp/ Samba Samba 2.0.3: Samba Upgrade Samba 2.2.8 http://download.samba.org/samba/ftp/ Samba Samba 2.0.4: Samba Upgrade Samba 2.2.8 http://download.samba.org/samba/ftp/ Samba Samba 2.0.5: Samba Upgrade Samba 2.2.8 http://download.samba.org/samba/ftp/ Samba Samba 2.0.6: Samba Upgrade Samba 2.2.8 http://download.samba.org/samba/ftp/ Samba Samba 2.0.7: Samba Upgrade Samba 2.2.8 http://download.samba.org/samba/ftp/ Samba Samba 2.0.8: Samba Upgrade Samba 2.2.8 http://download.samba.org/samba/ftp/ Samba Samba 2.0.9: Samba Upgrade Samba 2.2.8 http://download.samba.org/samba/ftp/ Samba Samba 2.0.10: Samba Upgrade Samba 2.2.8 http://download.samba.org/samba/ftp/ SuSE Upgrade smbclnt-2.0.10-21.alpha.rpm ftp://ftp.suse.com/pub/suse/axp/update/7.1/n1/smbclnt-2.0.10-21.alpha.rpm SuSE Upgrade smbclnt-2.0.10-21.ppc.rpm ftp://ftp.suse.com/pub/suse/ppc/update/7.1/n1/smbclnt-2.0.10-21.ppc.rpm SuSE Upgrade smbclnt-2.0.10-27.i386.rpm ftp://ftp.suse.com/pub/suse/i386/update/7.1/n1/smbclnt-2.0.10-27.i386.rpm SuSE Upgrade samba-2.0.10-21.alpha.rpm ftp://ftp.suse.com/pub/suse/axp/update/7.1/n2/samba-2.0.10-21.alpha.rpm SuSE Upgrade samba-2.0.10-21.ppc.rpm ftp://ftp.suse.com/pub/suse/ppc/update/7.1/n2/samba-2.0.10-21.ppc.rpm SuSE Upgrade samba-2.0.10-27.i386.rpm ftp://ftp.suse.com/pub/suse/i386/update/7.1/n2/samba-2.0.10-27.i386.rpm Samba Samba 2.2 .0a: Samba Upgrade Samba 2.2.8 http://download.samba.org/samba/ftp/ SuSE Upgrade smbclnt-2.2.0a-48.i386.rpm ftp://ftp.suse.com/pub/suse/i386/update/7.2/n1/smbclnt-2.2.0a-48.i386.rpm SuSE Upgrade samba-2.2.0a-48.i386.rpm ftp://ftp.suse.com/pub/suse/i386/update/7.2/n2/samba-2.2.0a-48.i386.rpm Samba Samba 2.2 .0: Samba Upgrade Samba 2.2.8 http://download.samba.org/samba/ftp/ Samba Samba 2.2.1 a: Samba Upgrade Samba 2.2.8 http://download.samba.org/samba/ftp/ SuSE Upgrade samba-2.2.1a-213.i386.rpm ftp://ftp.suse.com/pub/suse/i386/update/7.3/n2/samba-2.2.1a-213.i386.rpm SuSE Upgrade samba-2.2.1a-73.sparc.rpm ftp://ftp.suse.com/pub/suse/sparc/update/7.3/n2/samba-2.2.1a-73.sparc.rpm SuSE Upgrade samba-client-2.2.1a-147.ppc.rpm ftp://ftp.suse.com/pub/suse/ppc/update/7.3/n1/samba-client-2.2.1a-147.ppc.rpm SuSE Upgrade samba-client-2.2.1a-213.i386.rpm ftp://ftp.suse.com/pub/suse/i386/update/7.3/n1/samba-client-2.2.1a-213.i386.rpm SuSE Upgrade samba-client-2.2.1a-73.sparc.rpm ftp://ftp.suse.com/pub/suse/sparc/update/7.3/n1/samba-client-2.2.1a-73.sparc.rpm SuSE Upgrade samba-2.2.1a-147.ppc.rpm ftp://ftp.suse.com/pub/suse/ppc/update/7.3/n2/samba-2.2.1a-147.ppc.rpm Samba Samba 2.2.2: Samba Upgrade Samba 2.2.8 http://download.samba.org/samba/ftp/ Samba Samba 2.2.3 a: Samba Upgrade Samba 2.2.8 http://download.samba.org/samba/ftp/ SuSE Upgrade samba-2.2.3a-169.i386.patch.rpm ftp://ftp.suse.com/pub/suse/i386/update/8.0/n2/samba-2.2.3a-169.i386.patch.rpm SuSE Upgrade samba-2.2.3a-169.i386.rpm ftp://ftp.suse.com/pub/suse/i386/update/8.0/n2/samba-2.2.3a-169.i386.rpm SuSE Upgrade samba-client-2.2.3a-169.i386.patch.rpm ftp://ftp.suse.com/pub/suse/i386/update/8.0/n1/samba-client-2.2.3a-169.i386.patch.rpm SuSE Upgrade samba-client-2.2.3a-169.i386.rpm ftp://ftp.suse.com/pub/suse/i386/update/8.0/n1/samba-client-2.2.3a-169.i386.rpm Samba Samba 2.2.3: Samba Upgrade Samba 2.2.8 http://download.samba.org/samba/ftp/ Samba Samba 2.2.4: Samba Upgrade Samba 2.2.8 http://download.samba.org/samba/ftp/ Samba Samba 2.2.5: Samba Upgrade Samba 2.2.8 http://download.samba.org/samba/ftp/ SuSE Upgrade samba-2.2.5-160.i586.patch.rpm ftp://ftp.suse.com/pub/suse/i386/update/8.1/rpm/i586/samba-2.2.5-160.i586.patch.rpm SuSE Upgrade samba-2.2.5-160.i586.rpm ftp://ftp.suse.com/pub/suse/i386/update/8.1/rpm/i586/samba-2.2.5-160.i586.rpm SuSE Upgrade samba-client-2.2.5-160.i586.patch.rpm ftp://ftp.suse.com/pub/suse/i386/update/8.1/rpm/i586/samba-client-2.2.5-160.i586.patch.rpm SuSE Upgrade samba-client-2.2.5-160.i586.rpm ftp://ftp.suse.com/pub/suse/i386/update/8.1/rpm/i586/samba-client-2.2.5-160.i586.rpm Samba Samba 2.2.6: Samba Upgrade Samba 2.2.8 http://download.samba.org/samba/ftp/ Samba Samba 2.2.7 a: Samba Upgrade Samba 2.2.8 http://download.samba.org/samba/ftp/ Mandrake Upgrade nss_wins-2.2.7a-8.1mdk.i586.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Corporate Server 2.1. Slackware Upgrade samba-2.2.8-i386-1.tgz ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/n/samba-2.2.8-i386-1.tgz Red Hat Upgrade samba-swat-2.2.7a-7.9.0.i386.rpm ftp://updates.redhat.com/9/en/os/i386/samba-swat-2.2.7a-7.9.0.i386.rpm Red Hat Upgrade samba-client-2.2.7a-7.9.0.i386.rpm ftp://updates.redhat.com/9/en/os/i386/samba-client-2.2.7a-7.9.0.i386.rpm Red Hat Upgrade samba-common-2.2.7a-7.9.0.i386.rpm ftp://updates.redhat.com/9/en/os/i386/samba-common-2.2.7a-7.9.0.i386.rpm Red Hat Upgrade samba-2.2.7a-7.9.0.i386.rpm ftp://updates.redhat.com/9/en/os/i386/samba-2.2.7a-7.9.0.i386.rpm Mandrake Upgrade samba-client-2.2.7a-8.1mdk.i586.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Corporate Server 2.1. Mandrake Upgrade samba-common-2.2.7a-8.1mdk.i586.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Corporate Server 2.1. Mandrake Upgrade samba-doc-2.2.7a-8.1mdk.i586.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Corporate Server 2.1. Mandrake Upgrade samba-server-2.2.7a-8.1mdk.i586.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Corporate Server 2.1. Mandrake Upgrade samba-swat-2.2.7a-8.1mdk.i586.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Corporate Server 2.1. Mandrake Upgrade samba-winbind-2.2.7a-8.1mdk.i586.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Corporate Server 2.1. Mandrake Upgrade samba-client-2.2.7a-8.1mdk.i586.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Linux 8.0. Mandrake Upgrade samba-common-2.2.7a-8.1mdk.i586.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Linux 8.0. Mandrake Upgrade samba-doc-2.2.7a-8.1mdk.i586.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Linux 8.0. Mandrake Upgrade samba-server-2.2.7a-8.1mdk.i586.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Linux 8.0. Mandrake Upgrade samba-swat-2.2.7a-8.1mdk.i586.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Linux 8.0. Mandrake Upgrade samba-client-2.2.7a-8.1mdk.ppc.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Linux 8.0/PPC. Mandrake Upgrade samba-common-2.2.7a-8.1mdk.ppc.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Linux 8.0/PPC. Mandrake Upgrade samba-doc-2.2.7a-8.1mdk.ppc.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Linux 8.0/PPC. Mandrake Upgrade samba-server-2.2.7a-8.1mdk.ppc.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Linux 8.0/PPC. Mandrake Upgrade samba-swat-2.2.7a-8.1mdk.ppc.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Linux 8.0/PPC. Mandrake Upgrade samba-client-2.2.7a-8.1mdk.i586.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Linux 8.1. Mandrake Upgrade samba-common-2.2.7a-8.1mdk.i586.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Linux 8.1. Mandrake Upgrade samba-doc-2.2.7a-8.1mdk.i586.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Linux 8.1. Mandrake Upgrade samba-server-2.2.7a-8.1mdk.i586.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Linux 8.1. Mandrake Upgrade samba-swat-2.2.7a-8.1mdk.i586.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Linux 8.1. Mandrake Upgrade samba-client-2.2.7a-8.1mdk.ia64.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Linux 8.1/IA64. Mandrake Upgrade samba-common-2.2.7a-8.1mdk.ia64.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Linux 8.1/IA64. Mandrake Upgrade samba-doc-2.2.7a-8.1mdk.ia64.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Linux 8.1/IA64. Mandrake Upgrade samba-server-2.2.7a-8.1mdk.ia64.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Linux 8.1/IA64. Mandrake Upgrade samba-swat-2.2.7a-8.1mdk.ia64.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Linux 8.1/IA64. Mandrake Upgrade nss_wins-2.2.7a-8.1mdk.i586.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Linux 8.2. Mandrake Upgrade samba-client-2.2.7a-8.1mdk.i586.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Linux 8.2. Mandrake Upgrade samba-common-2.2.7a-8.1mdk.i586.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Linux 8.2. Mandrake Upgrade samba-doc-2.2.7a-8.1mdk.i586.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Linux 8.2. Mandrake Upgrade samba-server-2.2.7a-8.1mdk.i586.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Linux 8.2. Mandrake Upgrade samba-swat-2.2.7a-8.1mdk.i586.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Linux 8.2. Mandrake Upgrade samba-winbind-2.2.7a-8.1mdk.i586.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Linux 8.2. Mandrake Upgrade nss_wins-2.2.7a-8.1mdk.ppc.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Linux 8.2/PPC. Mandrake Upgrade samba-client-2.2.7a-8.1mdk.ppc.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Linux 8.2/PPC. Mandrake Upgrade samba-common-2.2.7a-8.1mdk.ppc.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Linux 8.2/PPC. Mandrake Upgrade samba-doc-2.2.7a-8.1mdk.ppc.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Linux 8.2/PPC. Mandrake Upgrade samba-server-2.2.7a-8.1mdk.ppc.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Linux 8.2/PPC. Mandrake Upgrade samba-swat-2.2.7a-8.1mdk.ppc.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Linux 8.2/PPC. Mandrake Upgrade samba-winbind-2.2.7a-8.1mdk.ppc.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Linux 8.2/PPC. Mandrake Upgrade nss_wins-2.2.7a-8.1mdk.i586.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Linux 8.2/PPC. Mandrake Upgrade nss_wins-2.2.7a-8.1mdk.i586.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Linux 9.0. Mandrake Upgrade samba-client-2.2.7a-8.1mdk.i586.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Linux 9.0. Mandrake Upgrade samba-common-2.2.7a-8.1mdk.i586.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Linux 9.0. Mandrake Upgrade samba-doc-2.2.7a-8.1mdk.i586.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Linux 9.0. Mandrake Upgrade samba-server-2.2.7a-8.1mdk.i586.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Linux 9.0. Mandrake Upgrade samba-swat-2.2.7a-8.1mdk.i586.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Linux 9.0. Mandrake Upgrade samba-winbind-2.2.7a-8.1mdk.i586.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Linux 9.0. Mandrake Upgrade samba-client-2.2.7a-8.1mdk.i586.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Multi Network Firewall 8.2. Mandrake Upgrade samba-common-2.2.7a-8.1mdk.i586.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Multi Network Firewall 8.2. Slackware Upgrade samba-2.2.8-i386-1.tgz ftp://ftp.slackware.com/pub/slackware/slackware-8.1/patches/packages/samba-2.2.8-i386-1.tgz Samba Samba 2.2.7: Samba Upgrade Samba 2.2.8 http://download.samba.org/samba/ftp/ Red Hat Upgrade samba-2.2.7-2.7.2.i386.rpm ftp://updates.redhat.com/7.2/en/os/i386/samba-2.2.7-2.7.2.i386.rpm Red Hat Upgrade samba-2.2.7-2.7.2.ia64.rpm ftp://updates.redhat.com/7.2/en/os/ia64/samba-2.2.7-2.7.2.ia64.rpm Red Hat Upgrade samba-2.2.7-2.7.3.i386.rpm ftp://updates.redhat.com/7.3/en/os/i386/samba-2.2.7-2.7.3.i386.rpm Red Hat Upgrade samba-2.2.7-4.8.0.i386.rpm ftp://updates.redhat.com/8.0/en/os/i386/samba-2.2.7-4.8.0.i386.rpm Red Hat Upgrade samba-client-2.2.7-2.7.2.i386.rpm ftp://updates.redhat.com/7.2/en/os/i386/samba-client-2.2.7-2.7.2.i386.rpm Red Hat Upgrade samba-client-2.2.7-2.7.2.ia64.rpm ftp://updates.redhat.com/7.2/en/os/ia64/samba-client-2.2.7-2.7.2.ia64.rpm Red Hat Upgrade samba-client-2.2.7-2.7.3.i386.rpm ftp://updates.redhat.com/7.3/en/os/i386/samba-client-2.2.7-2.7.3.i386.rpm Red Hat Upgrade samba-common-2.2.7-2.7.2.i386.rpm ftp://updates.redhat.com/7.2/en/os/i386/samba-common-2.2.7-2.7.2.i386.rpm Red Hat Upgrade samba-common-2.2.7-2.7.2.ia64.rpm ftp://updates.redhat.com/7.2/en/os/ia64/samba-common-2.2.7-2.7.2.ia64.rpm Red Hat Upgrade samba-common-2.2.7-2.7.3.i386.rpm ftp://updates.redhat.com/7.3/en/os/i386/samba-common-2.2.7-2.7.3.i386.rpm Red Hat Upgrade samba-common-2.2.7-4.8.0.i386.rpm ftp://updates.redhat.com/8.0/en/os/i386/samba-common-2.2.7-4.8.0.i386.rpm Red Hat Upgrade samba-swat-2.2.7-2.7.2.i386.rpm ftp://updates.redhat.com/7.2/en/os/i386/samba-swat-2.2.7-2.7.2.i386.rpm Red Hat Upgrade samba-swat-2.2.7-2.7.2.ia64.rpm ftp://updates.redhat.com/7.2/en/os/ia64/samba-swat-2.2.7-2.7.2.ia64.rpm Red Hat Upgrade samba-swat-2.2.7-2.7.3.i386.rpm ftp://updates.redhat.com/7.3/en/os/i386/samba-swat-2.2.7-2.7.3.i386.rpm Red Hat Upgrade samba-swat-2.2.7-4.8.0.i386.rpm ftp://updates.redhat.com/8.0/en/os/i386/samba-swat-2.2.7-4.8.0.i386.rpm 相关信息 报告：Sebastian Krahmer <krahmer at suse.de> 相关资料：http://online.securityfocus.com/advisories/5097 http://online.securityfocus.com/advisories/5129 http://online.securityfocus.com/advisories/5095 http://online.secur |
