Message-ID: <20070522205554.GA24757@outflux.net>
Date: Tue, 22 May 2007 13:55:54 -0700
From: Kees Cook <kees@...ntu.com>
To: ubuntu-security-announce@...ts.ubuntu.com
Cc: full-disclosure@...ts.grok.org.uk, bugtraq@...urityfocus.com
Subject: [USN-460-2] Samba regression

=========================================================== 
Ubuntu Security Notice USN-460-2               May 22, 2007
samba regression
http://bugs.debian.org/424629
===========================================================

A security issue affects the following Ubuntu releases:

Ubuntu 7.04

This advisory also applies to the corresponding versions of
Kubuntu, Edubuntu, and Xubuntu.

The problem can be corrected by upgrading your system to the
following package versions:

Ubuntu 7.04:
  samba                                    3.0.24-2ubuntu1.2

In general, a standard system upgrade is sufficient to effect the
necessary changes.

Details follow:

USN-460-1 fixed several vulnerabilities in Samba.  The upstream changes 
for CVE-2007-2444 had an unexpected side-effect in Feisty.  Shares 
configured with the "force group" option no longer behaved correctly.  
This update corrects the problem.  We apologize for the inconvenience.

Original advisory details:

 Paul Griffith and Andrew Hogue discovered that Samba did not fully drop 
 root privileges while translating SIDs. A remote authenticated user 
 could issue SMB operations during a small window of opportunity and gain 
 root privileges.  (CVE-2007-2444)


Updated packages for Ubuntu 7.04:

  Source archives:

    http://security.ubuntu.com/ubuntu/pool/main/s/samba/samba_3.0.24-2ubuntu1.2.diff.gz
      Size/MD5:   212153 6da96c74db7d1c09e641a152f8ee45e1
    http://security.ubuntu.com/ubuntu/pool/main/s/samba/samba_3.0.24-2ubuntu1.2.dsc
      Size/MD5:     1491 1a52756b8bbb47f02c26fde99a9bb4ce
    http://security.ubuntu.com/ubuntu/pool/main/s/samba/samba_3.0.24.orig.tar.gz
      Size/MD5: 17708128 89273f67a6d8067cbbecefaa13747153

  Architecture independent packages:

    http://security.ubuntu.com/ubuntu/pool/main/s/samba/samba-doc-pdf_3.0.24-2ubuntu1.2_all.deb
      Size/MD5:  6602776 f1ed1988f3c100b7fcee8cf79382111f
    http://security.ubuntu.com/ubuntu/pool/main/s/samba/samba-doc_3.0.24-2ubuntu1.2_all.deb
      Size/MD5:  6917070 34730228bbe70c548b9cc79076f5a90d

  amd64 architecture (Athlon64, Opteron, EM64T Xeon)

    http://security.ubuntu.com/ubuntu/pool/main/s/samba/libpam-smbpass_3.0.24-2ubuntu1.2_amd64.deb
      Size/MD5:   481854 ee8f1b1fbb9ddfcf17159ef2a13cd4d6
    http://security.ubuntu.com/ubuntu/pool/main/s/samba/libsmbclient-dev_3.0.24-2ubuntu1.2_amd64.deb
      Size/MD5:   116060 ef8a65e691ac3bc3cdc217d251d98c06
    http://security.ubuntu.com/ubuntu/pool/main/s/samba/libsmbclient_3.0.24-2ubuntu1.2_amd64.deb
      Size/MD5:   868206 9ce9c5d75e3f5892bc942f9e791afbff
    http://security.ubuntu.com/ubuntu/pool/main/s/samba/python-samba_3.0.24-2ubuntu1.2_amd64.deb
      Size/MD5:  6498044 a0daa795e35041c14e02ca111f853cb4
    http://security.ubuntu.com/ubuntu/pool/main/s/samba/samba-common_3.0.24-2ubuntu1.2_amd64.deb
      Size/MD5:  2691028 4895ca74acde997d07cdf39548f4d805
    http://security.ubuntu.com/ubuntu/pool/main/s/samba/samba-dbg_3.0.24-2ubuntu1.2_amd64.deb
      Size/MD5: 12259246 d5c64e437db85e4f5bfb4b02f0169c22
    http://security.ubuntu.com/ubuntu/pool/main/s/samba/samba_3.0.24-2ubuntu1.2_amd64.deb
      Size/MD5:  3757146 15dff197838e3bbee6baf66044614fc4
    http://security.ubuntu.com/ubuntu/pool/main/s/samba/smbclient_3.0.24-2ubuntu1.2_amd64.deb
      Size/MD5:  4515276 997576caa9efe64f1e7133b63c2209fd
    http://security.ubuntu.com/ubuntu/pool/main/s/samba/smbfs_3.0.24-2ubuntu1.2_amd64.deb
      Size/MD5:   479278 efb4d101652daeb2c0694e4789242d52
    http://security.ubuntu.com/ubuntu/pool/main/s/samba/swat_3.0.24-2ubuntu1.2_amd64.deb
      Size/MD5:   903766 be129c5939f7587c589e0e8bd19c0d2f
    http://security.ubuntu.com/ubuntu/pool/main/s/samba/winbind_3.0.24-2ubuntu1.2_amd64.deb
      Size/MD5:  2164682 9a72462741f78fcecb5231ebbc4fa728

  i386 architecture (x86 compatible Intel/AMD)

    http://security.ubuntu.com/ubuntu/pool/main/s/samba/libpam-smbpass_3.0.24-2ubuntu1.2_i386.deb
      Size/MD5:   435404 61bed726d70a5da7b415287b65ea879e
    http://security.ubuntu.com/ubuntu/pool/main/s/samba/libsmbclient-dev_3.0.24-2ubuntu1.2_i386.deb
      Size/MD5:   116068 b1b17947b46671789d3e65f444aa85ff
    http://security.ubuntu.com/ubuntu/pool/main/s/samba/libsmbclient_3.0.24-2ubuntu1.2_i386.deb
      Size/MD5:   793818 042c7cd1cb0d6be9c6b2b041c0462107
    http://security.ubuntu.com/ubuntu/pool/main/s/samba/python-samba_3.0.24-2ubuntu1.2_i386.deb
      Size/MD5:  5907188 069670d6e0d21aae088efbad12e60974
    http://security.ubuntu.com/ubuntu/pool/main/s/samba/samba-common_3.0.24-2ubuntu1.2_i386.deb
      Size/MD5:  2437476 fe052cc018a5c926b4ece39f7fe60904
    http://security.ubuntu.com/ubuntu/pool/main/s/samba/samba-dbg_3.0.24-2ubuntu1.2_i386.deb
      Size/MD5: 11858394 c452ee109a0b3d939eae2936e21880e0
    http://security.ubuntu.com/ubuntu/pool/main/s/samba/samba_3.0.24-2ubuntu1.2_i386.deb
      Size/MD5:  3341020 3ce55f95e53074e863f3cae5ced65516
    http://security.ubuntu.com/ubuntu/pool/main/s/samba/smbclient_3.0.24-2ubuntu1.2_i386.deb
      Size/MD5:  4015590 e75fbb06c321388db89d606e4683c88f
    http://security.ubuntu.com/ubuntu/pool/main/s/samba/smbfs_3.0.24-2ubuntu1.2_i386.deb
      Size/MD5:   426918 1d88ff8f4cd252ebf84a91832ae69923
    http://security.ubuntu.com/ubuntu/pool/main/s/samba/swat_3.0.24-2ubuntu1.2_i386.deb
      Size/MD5:   819738 fbd463381a1086b97507501587b15d06
    http://security.ubuntu.com/ubuntu/pool/main/s/samba/winbind_3.0.24-2ubuntu1.2_i386.deb
      Size/MD5:  1924906 76636feed1ebc02974a81c8d792eaccc

  powerpc architecture (Apple Macintosh G3/G4/G5)

    http://security.ubuntu.com/ubuntu/pool/main/s/samba/libpam-smbpass_3.0.24-2ubuntu1.2_powerpc.deb
      Size/MD5:   477712 077c3c5fb3684e84de52c0679bf95ba8
    http://security.ubuntu.com/ubuntu/pool/main/s/samba/libsmbclient-dev_3.0.24-2ubuntu1.2_powerpc.deb
      Size/MD5:   116064 285cbcff21f77ec169ba95b3fd8f04b1
    http://security.ubuntu.com/ubuntu/pool/main/s/samba/libsmbclient_3.0.24-2ubuntu1.2_powerpc.deb
      Size/MD5:   859006 328330da8f556219f969782b73a05d55
    http://security.ubuntu.com/ubuntu/pool/main/s/samba/python-samba_3.0.24-2ubuntu1.2_powerpc.deb
      Size/MD5:  6536378 e92bcf3417bb11e10ff10c27225b3415
    http://security.ubuntu.com/ubuntu/pool/main/s/samba/samba-common_3.0.24-2ubuntu1.2_powerpc.deb
      Size/MD5:  2652786 1948f2f71806f948d10e6d852f67b81d
    http://security.ubuntu.com/ubuntu/pool/main/s/samba/samba-dbg_3.0.24-2ubuntu1.2_powerpc.deb
      Size/MD5: 12571552 c79e1aeef927ef75004f8dea6e2809e4
    http://security.ubuntu.com/ubuntu/pool/main/s/samba/samba_3.0.24-2ubuntu1.2_powerpc.deb
      Size/MD5:  3726154 7d7f5bf3d8143f5ffa4e9e2a63806542
    http://security.ubuntu.com/ubuntu/pool/main/s/samba/smbclient_3.0.24-2ubuntu1.2_powerpc.deb
      Size/MD5:  4453980 a791426c9b3b4ac3007ef44e1c73e699
    http://security.ubuntu.com/ubuntu/pool/main/s/samba/smbfs_3.0.24-2ubuntu1.2_powerpc.deb
      Size/MD5:   486838 59669eb741b45c186fe16526119d782a
    http://security.ubuntu.com/ubuntu/pool/main/s/samba/swat_3.0.24-2ubuntu1.2_powerpc.deb
      Size/MD5:   893204 8c05c4a8b66a722701e2d78187d49477
    http://security.ubuntu.com/ubuntu/pool/main/s/samba/winbind_3.0.24-2ubuntu1.2_powerpc.deb
      Size/MD5:  2144258 83908708c55d4181859e0feb148dde67

  sparc architecture (Sun SPARC/UltraSPARC)

    http://security.ubuntu.com/ubuntu/pool/main/s/samba/libpam-smbpass_3.0.24-2ubuntu1.2_sparc.deb
      Size/MD5:   441942 c1c155969d490f566aa0f413a343a9e1
    http://security.ubuntu.com/ubuntu/pool/main/s/samba/libsmbclient-dev_3.0.24-2ubuntu1.2_sparc.deb
      Size/MD5:   116060 141c0d479be2682e20297979ccbc90e8
    http://security.ubuntu.com/ubuntu/pool/main/s/samba/libsmbclient_3.0.24-2ubuntu1.2_sparc.deb
      Size/MD5:   796330 ecb5923067b06e44646d5bf5f2747803
    http://security.ubuntu.com/ubuntu/pool/main/s/samba/python-samba_3.0.24-2ubuntu1.2_sparc.deb
      Size/MD5:  5932424 9d4c506b28f34b816adb6bc0237a37b4
    http://security.ubuntu.com/ubuntu/pool/main/s/samba/samba-common_3.0.24-2ubuntu1.2_sparc.deb
      Size/MD5:  2407996 06f0808891b90ae328e83cc8fceb7c30
    http://security.ubuntu.com/ubuntu/pool/main/s/samba/samba-dbg_3.0.24-2ubuntu1.2_sparc.deb
      Size/MD5: 10878116 47d21febc3f0d1a414e1ef4564fab09e
    http://security.ubuntu.com/ubuntu/pool/main/s/samba/samba_3.0.24-2ubuntu1.2_sparc.deb
      Size/MD5:  3344900 258dda921d636448de7fedab29003261
    http://security.ubuntu.com/ubuntu/pool/main/s/samba/smbclient_3.0.24-2ubuntu1.2_sparc.deb
      Size/MD5:  3962018 fdf2ccbff62ed1dde783c4bf8c127230
    http://security.ubuntu.com/ubuntu/pool/main/s/samba/smbfs_3.0.24-2ubuntu1.2_sparc.deb
      Size/MD5:   435762 da146cdf227e40924842168b0b0688d3
    http://security.ubuntu.com/ubuntu/pool/main/s/samba/swat_3.0.24-2ubuntu1.2_sparc.deb
      Size/MD5:   804986 f042b6a7afeec6c4ca1f1bc85fdb45cb
    http://security.ubuntu.com/ubuntu/pool/main/s/samba/winbind_3.0.24-2ubuntu1.2_sparc.deb
      Size/MD5:  1922850 f093eef0428fb16f2d7c1bc3f43c5cb2


Download attachment "signature.asc" of type "application/pgp-signature" (190 bytes)

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Powered by blists - more mailing lists