REDHAT-BUG-579445: Medium severity Samba Samba vulnerability

Published Apr 5, 2010

Updated

Description of problem: From me, while creating a file on a server which supports unix extensions such as Samba, if a file is being created which does not supply nameidata (i.e. nd is null), cifs client can oops when calling cifsposixopen.

http://comments.gmane.org/gmane.linux.file-systems.cifs/5782

Affected Software

2 affected components

Samba Samba

CIFS CIFS Client

Event History

Apr 5, 2010

Data Sourced

via Red Hat·08:42 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-579445?

The severity of REDHAT-BUG-579445 is currently undetermined but poses a potential risk when file creation is attempted with null nameidata.

How do I fix REDHAT-BUG-579445?

To fix REDHAT-BUG-579445, ensure that nameidata is properly supplied when creating files through the CIFS client.

What software is affected by REDHAT-BUG-579445?

REDHAT-BUG-579445 affects Samba and the CIFS Client, specifically when operating with Unix extensions on servers.

What is the impact of REDHAT-BUG-579445?

The impact of REDHAT-BUG-579445 can result in system crashes or unexpected behavior when handling file operations with null nameidata.

Is there an official patch for REDHAT-BUG-579445?

As of now, there is no official patch for REDHAT-BUG-579445, but monitoring for updates and community patches is advisable.