The smbd daemon in Samba 3.0.31 - 3.3.5 contains an uninitialized read of a data value that can potentially affect access control. If a user is trying to modify an access control list (ACL) and is denied permission, this deny may be overridden if the parameter "dos filemode" is set to "yes" in the smb.conf and the user already has write access to the file. The error occurs in checking that the user has write access. Uninitialized memory is read instead of the values in the 'stat' struct of the file. Fixed in 3.0.35.
> On Wed, Jun 24, 2009 at 03:40:17PM +0300, Alexander Bokovoy wrote: >> Это не критическая ошибка, ее нельзя использовать в настройках по умолчанию >> в наших дистрибутивах. поставлю normal. почему-то для security related багов всегда тянет задрать уровень...
В сизифе 3.0.37.
