National Cyber Awareness System

Vulnerability Summary for CVE-2010-1642

Overview

The reply_sesssetup_and_X_spnego function in sesssetup.c in smbd in Samba before 3.4.8 and 3.5.x before 3.5.2 allows remote attackers to trigger an out-of-bounds read, and cause a denial of service (process crash), via a \xff\xff security blob length in a Session Setup AndX request.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: CONFIRM

Name: http://git.samba.org/?p=samba.git;a=commit;h=9280051bfba337458722fb157f3082f93cbd9f2b

Type: Patch Information

Hyperlink:http://git.samba.org/?p=samba.git;a=commit;h=9280051bfba337458722fb157f3082f93cbd9f2b

External Source: CONFIRM

Name: https://bugzilla.samba.org/show_bug.cgi?id=7254

Hyperlink:https://bugzilla.samba.org/show_bug.cgi?id=7254

External Source: CONFIRM

Name: https://bugzilla.redhat.com/show_bug.cgi?id=594921

Hyperlink:https://bugzilla.redhat.com/show_bug.cgi?id=594921

External Source: VUPEN

Name: ADV-2010-1933

Hyperlink:http://www.vupen.com/english/advisories/2010/1933

External Source: MISC

Name: http://www.stratsec.net/Research/Advisories/Samba-Multiple-DoS-Vulnerabilities-(SS-2010-005)

Hyperlink:http://www.stratsec.net/Research/Advisories/Samba-Multiple-DoS-Vulnerabilities-%28SS-2010-005%29

External Source: BID

Name: 40097

Hyperlink:http://www.securityfocus.com/bid/40097

External Source: MANDRIVA

Name: MDVSA-2010:141

Hyperlink:http://www.mandriva.com/security/advisories?name=MDVSA-2010:141

External Source: CONFIRM

Name: http://security-tracker.debian.org/tracker/CVE-2010-1642

Hyperlink:http://security-tracker.debian.org/tracker/CVE-2010-1642

External Source: CONFIRM

Name: http://samba.org/samba/history/samba-3.5.2.html

Hyperlink:http://samba.org/samba/history/samba-3.5.2.html

External Source: CONFIRM

Name: http://samba.org/samba/history/samba-3.4.8.html

Hyperlink:http://samba.org/samba/history/samba-3.4.8.html