Login
Newsletter
Werbung

Sicherheit: Überschreiben von Dateien in Samba (Aktualisierung)
Aktuelle Meldungen Distributionen
Name: Überschreiben von Dateien in Samba (Aktualisierung)
ID: USN-3939-2
Distribution: Ubuntu
Plattformen: Ubuntu 12.04 ESM
Datum: Mo, 8. April 2019, 20:43
Referenzen: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3880
Applikationen: Samba
Update von: Überschreiben von Dateien in Samba

Originalnachricht


--===============0730547441139109507==
Content-Type: multipart/signed; micalg="pgp-sha256";
protocol="application/pgp-signature";
boundary="=-2pyagHoDXdoWydUgB5au"


--=-2pyagHoDXdoWydUgB5au
Content-Type: text/plain; charset="UTF-8
Content-Transfer-Encoding: quoted-printable

==========================================================================
Ubuntu Security Notice USN-3939-2
April 08, 2019

samba vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 12.04 ESM

Summary:

Samba could be made to create files in unexpected locations.

Software Description:
- samba: SMB/CIFS file, print, and login server for Unix

Details:

USN-3939-1 fixed a vulnerability in Samba. This update provides
the corresponding update for Ubuntu 12.04 ESM.

Original advisory details:

Michael Hanselmann discovered that Samba incorrectly handled registry
files. A remote attacker could possibly use this issue to create new
registry files outside of the share, contrary to expectations.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 12.04 ESM:
libsmbclient 2:3.6.25-0ubuntu0.12.04.17
samba 2:3.6.25-0ubuntu0.12.04.17

In general, a standard system update will make all the necessary
changes.

References:
https://usn.ubuntu.com/usn/usn-3939-2
https://usn.ubuntu.com/usn/usn-3939-1
CVE-2019-3880
--=-2pyagHoDXdoWydUgB5au
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: This is a digitally signed message part
Content-Transfer-Encoding: 7bit

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=ss87
-----END PGP SIGNATURE-----

--=-2pyagHoDXdoWydUgB5au--



--===============0730547441139109507==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64
Content-Disposition: inline

LS0gCnVidW50dS1zZWN1cml0eS1hbm5vdW5jZSBtYWlsaW5nIGxpc3QKdWJ1bnR1LXNlY3VyaXR5
LWFubm91bmNlQGxpc3RzLnVidW50dS5jb20KTW9kaWZ5IHNldHRpbmdzIG9yIHVuc3Vic2NyaWJl
IGF0OiBodHRwczovL2xpc3RzLnVidW50dS5jb20vbWFpbG1hbi9saXN0aW5mby91YnVudHUtc2Vj
dXJpdHktYW5ub3VuY2UK

--===============0730547441139109507==--
Pro-Linux
Pro-Linux @Facebook
Neue Nachrichten
Werbung