SSRT3536 Potential Security Vulnerability in CIFS/9000 Server

[Berlene Herren]

CIFS Server version A.01.09.02 and prior may allow modified
SMB/CIFS messages to cause smbd to overwrite portions of its
own process address space. This could potentially be
exploited to gain root access remotely.

See
http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX0304-254

Although having similar descriptions, this is a
different vulnerability from that described in
HPSBUX0303-251:
SSRT3509 Potential Security Vulnerability in CIFS/9000 Server
Using the fix described in this bulletin will correct
both vulnerabilities.

Berlene

[Stefan Pendl]

Hi,
European users should use
http://www4.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX0304-254

Please include the european link in every post of links to the american/pacific ITRC.

---
Stefan

[Berlene Herren]

I think I will post the pertinent parts of the bulletin, along with the bulletin ID. That should cover it, right?

Berlene

[Steven E. Protter]

How do I know when I'm posting links whether or not Europe can see them or not?

SEP

[Geoff Wild]

Any idea when the next major release of the CIFS/9000 Server will happen?

Current Source Samba is version 2.2.8a.

I would like to see HP up to 2.2.7a minimum....


Rgds...Geoff