USN-893-1: Samba vulnerability

Releases

• Ubuntu 9.10
• Ubuntu 9.04
• Ubuntu 8.10
• Ubuntu 8.04
• Ubuntu 6.06

Packages

• samba -

Details

Ronald Volgers discovered that the mount.cifs utility, when installed as a
setuid program, suffered from a race condition when verifying user
permissions. A local attacker could trick samba into mounting over
arbitrary locations, leading to a root privilege escalation.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 9.10

• smbfs - 2:3.4.0-3ubuntu5.4

Ubuntu 9.04

• smbfs - 2:3.3.2-1ubuntu3.3

Ubuntu 8.10

• smbfs - 2:3.2.3-1ubuntu3.7

Ubuntu 8.04

• smbfs - 3.0.28a-1ubuntu4.10

Ubuntu 6.06

• smbfs - 3.0.22-1ubuntu3.10

In general, a standard system upgrade is sufficient to effect the
necessary changes.

References

• CVE-2009-3297
• CVE-2010-0787

Related notices

• USN-892-1: fuse-utils, fuse