OSVDB ID: 34700

Title: Samba Unfiltered MS-RPC Calls Arbitrary Remote Command Execution

Info

Disclosure
May 14, 2007

Discovery
Unknown

Dates

Exploit
Unknown

Solution
Unknown

Description

 Samba contains a flaw that may allow a malicious user to execute arbitrary shell commands. The issue is triggered due to MS-RPC does not properly check user-supplied input when passing RPC messages from external scripts to '/bin/sh'. It is possible that the flaw may allow code execution resulting in a loss of integrity.

Classification

 Location: Remote / Network Access
Attack Type: Input Manipulation
Impact: Loss of Integrity
Exploit: Exploit Public, Exploit Private
Disclosure: OSVDB Verified, Vendor Verified

Solution

 Upgrade to version 3.0.25 or higher, as it has been reported to fix this vulnerability. In addition, Samba has released a patch for some older versions.

Products

Samba Project

Samba

 3.0.0
3.0.1
3.0.2
3.0.3
3.0.4
3.0.5
3.0.6
3.0.7
3.0.8
3.0.9
3.0.10
3.0.11
3.0.12
3.0.13
3.0.14
3.0.14a
3.0.2a
3.0.20
3.0.20a
3.0.20b
3.0.21
3.0.21a
3.0.21b
3.0.21c
3.0.22
3.0.23
3.0.23a
3.0.23b
3.0.23c
3.0.23d
3.0.24
3.0.25rc3

References

Credit

Unknown or Incomplete


Direct URL: http://osvdb.org/34700