Update for net/samba to version 3.5.5

http://www.samba.org./samba/history/samba-3.5.5.html


CVE-2010-3069:
   All current released versions of Samba are vulnerable to
   a buffer overrun vulnerability. The sid_parse() function
   (and related dom_sid_parse() function in the source4 code)
   do not correctly check their input lengths when reading a
   binary representation of a Windows SID (Security ID). This
   allows a malicious client to send a sid that can overflow
   the stack variable that is being used to store the SID in the
   Samba smbd server.

Ian McWilliam

Attachment: samba-3.5.5.diff
Description: Binary data



Reply via email to