Samba - Is my server vulnerable to CVE-2008-1105?

Posted by Joao Heleno on Server Fault See other posts from Server Fault or by Joao Heleno
Published on 2010-05-06T14:29:55Z Indexed on 2010/05/06 14:38 UTC
Read the original article Hit count: 348

Filed under:

centos

|

vulnerabilities

|

exploit

Hi!

I have a CentOS server that is running Samba and I want to verify the vulnerability addressed by CVE-2008-1105.

What scenarios can I build in order to run the exploit that is mentioned in http://secunia.com/advisories/cve_reference/CVE-2008-1105/?

http://secunia.com/secunia_research/2008-20/advisory/ says that "Successful exploitation allows execution of arbitrary code by tricking a user into connecting to a malicious server (e.g. by clicking an "smb://" link) or by sending specially crafted packets to an "nmbd" server configured as a local or domain master browser."

More info:

http://www.samba.org/samba/security/CVE-2008-1105.html

http://secunia.com/secunia_research/2008-20/advisory/

© Server Fault or respective owner

Related posts about centos

Problems with repositories on CentOS 3.9

as seen on Super User - Search for 'Super User'
Hello, I have CentOS 3.9 for i386. When I try to instal some thing with yum, i.e: yum install firefox or yum install firefox* or yum list firefox and so on, I get: +++++++++++++++++++ yum info firefox Gathering header information file(s) from server(s) Server: CentOS-3 - Addons Server: CentOS-3 -… >>> More
Problems with repositories on CentOS 3.9

as seen on Stack Overflow - Search for 'Stack Overflow'
Hello, I have CentOS 3.9 for i386. When I try to instal some thing with yum, i.e: yum install firefox or yum install firefox* or yum list firefox and so on, I get: +++++++++++++++++++ yum info firefox Gathering header information file(s) from server(s) Server: CentOS-3 - Addons Server: CentOS-3 -… >>> More
centos yum problems

as seen on Server Fault - Search for 'Server Fault'
I am really new to using linux and have just formatted my centos 5.2 vps and am trying to install links by using the command yum install links. But the following error gets displayed: [root@inverses ~]# yum install links Loading "fastestmirror" plugin Loading mirror speeds from cached hostfile *… >>> More
Networking issues with Linux server (CentOS 5.3)

as seen on Server Fault - Search for 'Server Fault'
I have a Linux server hosting our bug tracking software (CentOS 5.2 Kernel 2.6.18-128.4.1.el5) that I have having some strange network problems with. The machine is configured with two NICS, one for the public interface and the other for our server back end network. The problem is that after doing… >>> More
Networking issues with Linux server (CentOS 5.3)

as seen on Server Fault - Search for 'Server Fault'
I have a Linux server hosting our bug tracking software (CentOS 5.2 Kernel 2.6.18-128.4.1.el5) that I have having some strange network problems with. The machine is configured with two NICS, one for the public interface and the other for our server back end network. The problem is that after doing… >>> More

Related posts about vulnerabilities

Website Vulnerabilities

as seen on Johnny Coder - Search for 'Johnny Coder'
The folks at the Open Web Application Security Project publish a list of the top 10 vulnerabilities. In a recent CodeBrew I provided a quick overview of them all and spent a good amount of time focusing on the most prevalent vulnerability, Cross Site Scripting (XSS). I gave an overview of XSS… >>> More
Safari 4.0.5 Seeks to Secure WebKit Vulnerabilities

as seen on Internet.com - Search for 'Internet.com'
Apple releases Safari 4.0.5 to address sixteen security flaws, the majority of which are in the Web browser's WebKit rendering engine. >>> More
Expert: New Vulnerabilities in IE Browser

as seen on Internet.com - Search for 'Internet.com'
A security firm says that it discovered another set of vulnerabilities in IE that hackers can exploit to remotely access all of the data on a personal computer. >>> More
Expert: New Vulnerabilities in IE Browser

as seen on Internet.com - Search for 'Internet.com'
A security firm says that it discovered another set of vulnerabilities in IE that hackers can exploit to remotely access all of the data on a personal computer. >>> More
Apple Safari Update Tackles WebKit Vulnerabilities

as seen on Internet.com - Search for 'Internet.com'
Flaws originating in WebKit are chief among the issues addressed in Safari 4.0.5. >>> More