Samba多个ASN.1和MailSlot解析模块远程拒绝服务漏洞

漏洞信息详情

Samba多个ASN.1和MailSlot解析模块远程拒绝服务漏洞

• CNNVD编号：CNNVD-200409-027
• 危害等级： 中危
  
  
• CVE编号：
  CVE-2004-0807
  
• 漏洞类型：
  
  
  设计错误
  
• 发布时间：
  
  2004-09-13
  
• 威胁类型：
  
  
  远程
  
• 更新时间：
  
  2005-10-20
  
• 厂        商：
  
  mandrakesoft
• 漏洞来源：
  iDEFENSE Security …

Samba是一套实现SMB(Server Messages Block)协议，跨平台进行文件共享和打印共享服务的程序。
smbd对多个畸形请求缺少正确处理，远程攻击者可以利用这个漏洞使服务程序消耗大量资源，进行拒绝服务攻击。
未授权攻击者可以发送畸形请求，每个请求派生一个新进程，每个新进程进入无限循环，可导致服务程序崩溃。此类攻击只需要少量带宽，每个请求只需358字节，超过4000个请求可导致512M RAM、512SWAP的RedHat Fedora Core 1机器崩溃。

厂商补丁：
MandrakeSoft
————
MandrakeSoft已经为此发布了一个安全公告(MDKSA-2004:092)以及相应补丁:

MDKSA-2004:092：Updated samba packages fix multiple vulnerabilities

链接：http://www.linux-mandrake.com/en/security/2004/2004-092.php” target=”_blank”>
http://www.linux-mandrake.com/en/security/2004/2004-092.php

补丁下载：

Updated Packages:

Mandrakelinux 10.0:

ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/10.0/RPMS/libsmbclient0-3.0.6-4.1.100mdk.i586.rpm

ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/10.0/RPMS/libsmbclient0-devel-3.0.6-4.1.100mdk.i586.rpm

ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/10.0/RPMS/libsmbclient0-static-devel-3.0.6-4.1.100mdk.i586.rpm

ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/10.0/RPMS/nss_wins-3.0.6-4.1.100mdk.i586.rpm

ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/10.0/RPMS/samba-client-3.0.6-4.1.100mdk.i586.rpm

ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/10.0/RPMS/samba-common-3.0.6-4.1.100mdk.i586.rpm

ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/10.0/RPMS/samba-doc-3.0.6-4.1.100mdk.i586.rpm

ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/10.0/RPMS/samba-passdb-mysql-3.0.6-4.1.100mdk.i586.rpm

ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/10.0/RPMS/samba-passdb-pgsql-3.0.6-4.1.100mdk.i586.rpm

ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/10.0/RPMS/samba-passdb-xml-3.0.6-4.1.100mdk.i586.rpm

ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/10.0/RPMS/samba-server-3.0.6-4.1.100mdk.i586.rpm

ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/10.0/RPMS/samba-swat-3.0.6-4.1.100mdk.i586.rpm

ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/10.0/RPMS/samba-winbind-3.0.6-4.1.100mdk.i586.rpm

ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/10.0/SRPMS/samba-3.0.6-4.1.100mdk.src.rpm

Mandrakelinux 10.0/AMD64:

ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/amd64/10.0/RPMS/lib64smbclient0-3.0.6-4.1.100mdk.amd64.rpm

ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/amd64/10.0/RPMS/lib64smbclient0-devel-3.0.6-4.1.100mdk.amd64.rpm

ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/amd64/10.0/RPMS/lib64smbclient0-static-devel-3.0.6-4.1.100mdk.amd64.rpm

ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/amd64/10.0/RPMS/nss_wins-3.0.6-4.1.100mdk.amd64.rpm

ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/amd64/10.0/RPMS/samba-client-3.0.6-4.1.100mdk.amd64.rpm

ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/amd64/10.0/RPMS/samba-common-3.0.6-4.1.100mdk.amd64.rpm

ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/amd64/10.0/RPMS/samba-doc-3.0.6-4.1.100mdk.amd64.rpm

ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/amd64/10.0/RPMS/samba-passdb-mysql-3.0.6-4.1.100mdk.amd64.rpm

上述升级软件还可以在下列地址中的任意一个镜像ftp服务器上下载：

http://www.mandrakesecure.net/en/ftp.php” target=”_blank”>
http://www.mandrakesecure.net/en/ftp.php
Samba
—–
目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：

Samba Patch patch-3.0.5-3.0.6.diffs.gz

http://us4.samba.org/samba/ftp/patches/security/patch-3.0.5-3.0.6.diffs.gz” target=”_blank”>
http://us4.samba.org/samba/ftp/patches/security/patch-3.0.5-3.0.6.diffs.gz

来源: TRUSTIX
名称: 2004-0046
链接:http://www.trustix.net/errata/2004/0046/

来源: REDHAT
名称: RHSA-2004:467
链接:http://www.redhat.com/support/errata/RHSA-2004-467.html

来源: IDEFENSE
名称: 20040913 Samba 3.x SMBD Remote Denial of Service Vulnerability
链接:http://www.idefense.com/application/poi/display?id=139&type=vulnerabilities

来源: GENTOO
名称: GLSA-200409-16
链接:http://www.gentoo.org/security/en/glsa/glsa-200409-16.xml

来源: BUGTRAQ
名称: 20040915 [OpenPKG-SA-2004.040] OpenPKG Security Advisory (samba)
链接:http://marc.theaimsgroup.com/?l=bugtraq&m=109526231623307&w=2

来源: BUGTRAQ
名称: 20040913 Samba 3.0 DoS Vulberabilities (CAN-2004-0807 & CAN-2004-0808)
链接:http://marc.theaimsgroup.com/?l=bugtraq&m=109509335230495&w=2

来源: CONECTIVA
名称: CLA-2004:873
链接:http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000873

来源: OVAL
名称: oval:org.mitre.oval:def:11141
链接:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11141