Samba Memory Corruption Vulnerability (CVE-2014-3493)

Samba Memory Corruption Vulnerability (CVE-2014-3493)

Release date:
Updated on:

Affected Systems:
Samba <4.1.9
Samba <4.0.19
Samba <3.6.24
Description:
--------------------------------------------------------------------------------
Bugtraq id: 68150
CVE (CAN) ID: CVE-2014-3493
 
Samba is a set of programs that implement the SMB (Server Messages Block) protocol, cross-platform file sharing and print sharing services.
 
The push_ascii function of Samba 3.6.0-4.1.8 has a security vulnerability, which allows authenticated remote attackers to read Unicode path names without specifying Unicode, leading to Character Set conversion failure, trigger indirect reference of invalid pointers, resulting in DOS (memory corruption and background program crash ).

-------------------------------------- Split line --------------------------------------

The speed of accessing samba from Ubuntu dual Nic of VMWare Virtual Machine doubles

Add the Samba File Sharing Server to the Windows Server 2003 Domain

Samba installation Configuration

Samba service configuration in CentOS 6.2

How to Build the Win7 + VMware + Fedora18 Samba Server

-------------------------------------- Split line --------------------------------------
 
<* Source: Simon Arlott

Link: http://www.samba.org/samba/security/CVE-2014-3493
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:
 
Samba
-----
Samba has released a Security Bulletin (CVE-2014-3493) and patches for this:
CVE-2014-3493: Denial of service-Server crash/memory resume uption
Link: http://www.samba.org/samba/security/CVE-2014-3493

Samba details: click here
Samba: click here

This article permanently updates the link address: