Potential Remote Denial of Service Vulnerability in Samba 3.0.x <= 3.0.7

[Gerardo Di Giacomo]

It has been reported a potential remote denial of service vulnerability in Samba
and it *seems* that ubuntu packages are vulnerable. The patch provided by
samba.org can be applied to fix the vulnerability.

The URL of the page is:
http://us4.samba.org/samba/ftp/patches/security/samba-3.0.7-CAN-2004-0930.patch

[Martin Pitt (pitti)]

Created an attachment (id=720)
interdiff for security update -1ubuntu6.1

[Martin Pitt (pitti)]

I already prepared an updated package yesterday, interdiff attached. I used the
patch provided by the Samba developers:

  http://us4.samba.org/samba/ftp/patches/security/samba-3.0.7-CAN-2004-0930.patch

Package builds and works fine, however I did not yet scrutinize the patch myself.

[Martin Pitt (pitti)]

Fixed in Warty:
 samba (3.0.7-1ubuntu6.1) warty-security; urgency=low
 .
   * SECURITY UPDATE: fix potential remote Denial of Service
   * Added patch CAN-2004-0930:
     A remote attacker could cause and smbd process to consume abnormal amounts
     of system resources due to an input validation error when matching filenames
     containing wildcard characters.
   * References:
     CAN-2004-0930
     http://www.securityfocus.com/archive/1/380551

Fixed in Hoary in version 3.0.7-1ubuntu7.