cpet/openbsd-ports
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

SECURITY update to Samba 3.6.5, from maintainer Ian McWilliam

Browse Source 
http://www.samba.org/samba/security/CVE-2012-2111

Samba versions 3.4.x to 3.6.4 inclusive are affected by a
vulnerability that allows arbitrary users to modify privileges on a
file server.

Security checks were incorrectly applied to the Local Security
Authority (LSA) remote proceedure calls (RPC) CreateAccount,
OpenAccount, AddAccountRights and RemoveAccountRights allowing any
authenticated user to modify the privileges database.

This is a serious error, as it means that authenticated users can
connect to the LSA and grant themselves the "take ownership"
privilege. This privilege is used by the smbd file server to grant the
ability to change ownership of a file or directory which means users
could take ownership of files or directories they do not own.
This commit is contained in:
sthen 2012-05-03 07:40:05 +00:00
parent 53c55cc2d5
commit 2314056268
2 changed files with 7 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
net/samba/Makefile
View File

@ -1,13 +1,12 @@
# $OpenBSD: Makefile,v 1.162 2012/04/28 10:52:08 ajacoutot Exp $
# $OpenBSD: Makefile,v 1.163 2012/05/03 07:40:05 sthen Exp $
SHARED_ONLY= Yes
COMMENT-main= SMB and CIFS client and server for UNIX
COMMENT-docs= additional documentation and examples for Samba
DISTNAME= samba-3.6.4
DISTNAME= samba-3.6.5
PKGNAME-main= ${DISTNAME}
REVISION-main= 1
FULLPKGNAME-docs= ${DISTNAME:S/-/-docs-/}
FULLPKGPATH-docs= net/samba,-docs

10
net/samba/distinfo
View File

@ -1,5 +1,5 @@
MD5 (samba-3.6.4.tar.gz) = 2OBw4qOxLyAvNH5EJ0abwg==
RMD160 (samba-3.6.4.tar.gz) = qX5dUT/8crDXbhfHafa5moBK3uA=
SHA1 (samba-3.6.4.tar.gz) = ZJLtIkbWK915OJsOfcjP+8TUH9o=
SHA256 (samba-3.6.4.tar.gz) = WQrC/H9t1w6Uezre1fy0Qxpau6TcPMG+xWZifhMrWRQ=
SIZE (samba-3.6.4.tar.gz) = 29007087
MD5 (samba-3.6.5.tar.gz) = LwwUVHMzwbSP1HKLAx5wQA==
RMD160 (samba-3.6.5.tar.gz) = AYDo1O2pY0BI1B3hZv57agfDi0U=
SHA1 (samba-3.6.5.tar.gz) = 5BYRyVsruRx3NZKHQriv9PwNp24=
SHA256 (samba-3.6.5.tar.gz) = ivZf87jBFV54l8iaiV4xVVNOw8W5eHfuLwX8nYurgMQ=
SIZE (samba-3.6.5.tar.gz) = 29009444