Fix CVE-2008-1105 A heap-based buffer overflow flaw has been found in the way Samba clients handle over-sized packets. If a client connected to a malicious Samba server, it was possible to execute arbitrary code as the Samba client user. The Samba server can also act as a client to perform some operations (print notify, domain member vs domain controler ...). This could result in the server executing the vulnerable client code, resulting in arbitrary code execution with the permissions of the Samba server.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote MiracleLinux 3 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2008-78:02 advisory.

    Samba is the suite of programs by which a lot of PC-related machines     share files, printers, and other information (such as lists of     available files and printers). The Windows NT, OS/2, and Linux     operating systems support this natively, and add-on packages can     enable the same thing for DOS, Windows, VMS, UNIX of all kinds, MVS,     and more. This package provides an SMB server that can be used to     provide network services to SMB (sometimes called Lan Manager)     clients. Samba uses NetBIOS over TCP/IP (NetBT) protocols and does NOT     need the NetBEUI (Microsoft Raw NetBIOS frame) protocol.
    CVE-2008-1105: Heap-based buffer overflow in the receive_smb_raw function in util/sock.c in Samba 3.0.0     through 3.0.29 allows remote attackers to execute arbitrary code via a crafted SMB response.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Updated samba packages that fix a security issue are now available for Red Hat Enterprise Linux 4.5 Extended Update Support.

This update has been rated as having critical security impact by the Red Hat Security Response Team.

Samba is a suite of programs used by machines to share files, printers, and other information.

A heap-based buffer overflow flaw was found in the way Samba clients handle over-sized packets. If a client connected to a malicious Samba server, it was possible to execute arbitrary code as the Samba client user. It was also possible for a remote user to send a specially crafted print request to a Samba server that could result in the server executing the vulnerable client code, resulting in arbitrary code execution with the permissions of the Samba server.
(CVE-2008-1105)

Red Hat would like to thank Alin Rad Pop of Secunia Research for responsibly disclosing this issue.

Users of Samba are advised to upgrade to these updated packages, which contain a backported patch to resolve this issue.

The remote host is running a version of Mac OS X 10.5.x that is prior to 10.5.4. 

Mac OS X 10.5.4 contains security fixes for multiple components.

The remote host is running a version of Mac OS X 10.4 that does not have the security update 2008-004 applied. 

This update contains security fixes for a number of programs.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
32486	Fedora 7 : samba-3.0.28a-1.fc7 (2008-4797)	Nessus	Fedora Local Security Checks	2008/6/2	2021/1/11	high
284492	MiracleLinux 3 : samba-3.0.24-10AX (AXSA:2008-78:02)	Nessus	Miracle Linux Local Security Checks	2026/1/14	2026/1/14	critical
63855	RHEL 4 : samba (RHSA-2008:0289)	Nessus	Red Hat Local Security Checks	2013/1/24	2021/1/14	high
33281	Mac OS X 10.5.x < 10.5.4 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	2008/7/1	2024/5/28	critical
33282	Mac OS X Multiple Vulnerabilities (Security Update 2008-004)	Nessus	MacOS X Local Security Checks	2008/7/1	2024/5/28	critical

检测

插件搜索

high

critical

high

critical

critical