发布日期：2004-09-13
更新日期：2004-09-21

受影响系统：

Samba Samba 3.0.6
Samba Samba 3.0.5
Samba Samba 3.0.4
Samba Samba 3.0.3
Samba Samba 3.0.2
Samba Samba 3.0.1
Samba Samba 3.0 alpha
Samba Samba 3.0

不受影响系统：

Samba Samba 3.0.7

描述：

---

BUGTRAQ  ID: 11156
CVE(CAN) ID: CVE-2004-0807,CVE-2004-0808

Samba是一套实现SMB（Server Messages Block）协议，跨平台进行文件共享和打印共享服务的程序。

smbd对多个畸形请求缺少正确处理，远程攻击者可以利用这个漏洞使服务程序消耗大量资源，进行拒绝服务攻击。

未授权攻击者可以发送畸形请求，每个请求派生一个新进程，每个新进程进入无限循环，可导致服务程序崩溃。此类攻击只需要少量带宽，每个请求只需358字节，超过4000个请求可导致512M RAM、512SWAP的RedHat Fedora Core 1机器崩溃。

<*来源：iDEFENSE Security Advisory （labs@idefense.com）
  
  链接：http://www.idefense.com/application/poi/display?id=138&type=vulnerabilities
                http://www.linux-mandrake.com/en/security/2004/2004-092.php
*>

建议：

---

厂商补丁：

MandrakeSoft
------------
MandrakeSoft已经为此发布了一个安全公告（MDKSA-2004:092）以及相应补丁:
MDKSA-2004:092：Updated samba packages fix multiple vulnerabilities
链接：http://www.linux-mandrake.com/en/security/2004/2004-092.php

补丁下载：

Updated Packages:

Mandrakelinux 10.0:
ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/10.0/RPMS/libsmbclient0-3.0.6-4.1.100mdk.i586.rpm
ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/10.0/RPMS/libsmbclient0-devel-3.0.6-4.1.100mdk.i586.rpm
ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/10.0/RPMS/libsmbclient0-static-devel-3.0.6-4.1.100mdk.i586.rpm
ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/10.0/RPMS/nss_wins-3.0.6-4.1.100mdk.i586.rpm
ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/10.0/RPMS/samba-client-3.0.6-4.1.100mdk.i586.rpm
ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/10.0/RPMS/samba-common-3.0.6-4.1.100mdk.i586.rpm
ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/10.0/RPMS/samba-doc-3.0.6-4.1.100mdk.i586.rpm
ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/10.0/RPMS/samba-passdb-mysql-3.0.6-4.1.100mdk.i586.rpm
ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/10.0/RPMS/samba-passdb-pgsql-3.0.6-4.1.100mdk.i586.rpm
ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/10.0/RPMS/samba-passdb-xml-3.0.6-4.1.100mdk.i586.rpm
ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/10.0/RPMS/samba-server-3.0.6-4.1.100mdk.i586.rpm
ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/10.0/RPMS/samba-swat-3.0.6-4.1.100mdk.i586.rpm
ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/10.0/RPMS/samba-winbind-3.0.6-4.1.100mdk.i586.rpm
ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/10.0/SRPMS/samba-3.0.6-4.1.100mdk.src.rpm

Mandrakelinux 10.0/AMD64:
ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/amd64/10.0/RPMS/lib64smbclient0-3.0.6-4.1.100mdk.amd64.rpm
ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/amd64/10.0/RPMS/lib64smbclient0-devel-3.0.6-4.1.100mdk.amd64.rpm
ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/amd64/10.0/RPMS/lib64smbclient0-static-devel-3.0.6-4.1.100mdk.amd64.rpm
ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/amd64/10.0/RPMS/nss_wins-3.0.6-4.1.100mdk.amd64.rpm
ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/amd64/10.0/RPMS/samba-client-3.0.6-4.1.100mdk.amd64.rpm
ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/amd64/10.0/RPMS/samba-common-3.0.6-4.1.100mdk.amd64.rpm
ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/amd64/10.0/RPMS/samba-doc-3.0.6-4.1.100mdk.amd64.rpm
ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/amd64/10.0/RPMS/samba-passdb-mysql-3.0.6-4.1.100mdk.amd64.rpm

上述升级软件还可以在下列地址中的任意一个镜像ftp服务器上下载：
http://www.mandrakesecure.net/en/ftp.php

Samba
-----
目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：

Samba Patch patch-3.0.5-3.0.6.diffs.gz
http://us4.samba.org/samba/ftp/patches/security/patch-3.0.5-3.0.6.diffs.gz

浏览次数：2930
严重程度：0（网友投票）