Gentoo: pam_smb Remote buffer overflow vulnerability
If a long password is supplied, this can cause a buffer overflow whichcould be exploited to execute arbitrary code with the privileges of theprocess which invokes PAM services.
Summary
- - --------------------------------------------------------------------- GENTOO LINUX SECURITY ANNOUNCEMENT 200309-01 - - ---------------------------------------------------------------------
- - ---------------------------------------------------------------------
quote from Debian DSA-374-1:
"If a long password is supplied, this can cause a buffer overflow which could be exploited to execute arbitrary code with the privileges of the process which invokes PAM services."
SOLUTION
It is recommended that all Gentoo Linux users who are running net-misc/pam_smb upgrade to pam_smb-2.0.0_rc5 as follows
emerge sync emerge pam_smb emerge clean
- - --------------------------------------------------------------------- aliz@gentoo.org - GnuPG key is available at - - ---------------------------------------------------------------------
Resolution
References
Availability
Concerns
Severity
� � � � � PACKAGE : pam_smb
� � � � � SUMMARY : buffer overflow
� � � � � � �DATE : 2003-09-01 12:12 UTC
� � � � � EXPLOIT : remote
VERSIONS AFFECTED : =pam_smb-2.0.0_rc5
� � � � � � � CVE : CAN-2003-0686
Background
