close
Pourquoi s'enregistré ... Pour bénéficié de plein d'avantage, plus l'accès à des partis du site qui ne sont accessible qu'aux membres. L'inscription n'est pas une obligation.

       
Mot de passe oublié?    Identifiant oublié?    Créer un compte

Si toute fois vous avez envies de vous inscrire, donner une adresse e-mail valide, car il vous seras envoyer un mail de confirmation d'ouverture de compte. Merci.
Top Panel
Login
Top Panel

Pin-Up

Recherche Google

Publicité

MDVSA-2011:148: samba PDF Imprimer Envoyer
(0 Votes)
Écrit par Administrator   
Mercredi, 12 Octobre 2011 23:00
Multiple vulnerabilities has been discovered and corrected in
samba/cifs-utils:

smbfs in Samba 3.5.8 and earlier attempts to use (1) mount.cifs to
append to the /etc/mtab file and (2) umount.cifs to append to the
/etc/mtab.tmp file without first checking whether resource limits
would interfere, which allows local users to trigger corruption of
the /etc/mtab file via a process with a small RLIMIT_FSIZE value,
a related issue to CVE-2011-1089 (CVE-2011-1678).

The check_mtab function in client/mount.cifs.c in mount.cifs in
smbfs in Samba 3.5.10 and earlier does not properly verify that the
(1) device name and (2) mountpoint strings are composed of valid
characters, which allows local users to cause a denial of service
(mtab corruption) via a crafted string. NOTE: this vulnerability
exists because of an incorrect fix for CVE-2010-0547 (CVE-2011-2724).

Additionally for Mandriva Linux 2010.2 the cifs-utils package has been
upgraded to the 4.8.1 version that brings numerous additional fixes.

Packages for 2009.0 are provided as of the Extended Maintenance
Program. Please visit this link to learn more:
http://store.mandriva.com/product_info.php?cPath=149&products_id=490

The updated packages have been patched to correct these issues.

Lire la suite...

 

Ajouter un Commentaire


Code de sécurité
Rafraîchir

maps.amung.us

www.geo-loc.com

Publicité

Browse the web faster with Firefox