Bug 20558

Summary:	CVE-2009-1888: Uninitialized read of a data value
Product:	Sisyphus	Reporter:	Vladimir Lettiev <crux>
Component:	samba	Assignee:	Evgeny Sinelnikov <sin>
Status:	CLOSED FIXED	QA Contact:	qa-sisyphus
Severity:	normal
Priority:	P3	CC:	mike, sin
Version:	unstable	Keywords:	security
Hardware:	all
OS:	Linux
URL:	http://www.samba.org/samba/security/CVE-2009-1888.html

Description

Vladimir Lettiev 2009-06-24 11:16:49 MSD

The smbd daemon in Samba 3.0.31 - 3.3.5 contains an
uninitialized read of a data value that can potentially
affect access control. If a user is trying to modify
an access control list (ACL) and is denied permission,
this deny may be overridden if the parameter "dos filemode"
is set to "yes" in the smb.conf and the user already has write
access to the file. The error occurs in checking that the
user has write access. Uninitialized memory is read instead
of the values in the 'stat' struct of the file.

Fixed in 3.0.35.

Comment 1

Vladimir Lettiev 2009-06-24 17:54:26 MSD

> On Wed, Jun 24, 2009 at 03:40:17PM +0300, Alexander Bokovoy wrote:
>> Это не критическая ошибка, ее нельзя использовать в настройках по умолчанию                                               
>> в наших дистрибутивах.

поставлю normal. почему-то для security related багов всегда тянет задрать уровень...

Comment 2

Michael Shigorin 2010-01-24 22:16:21 MSK

В сизифе 3.0.37.