Re: Samba CVE-2017-7494 on 3.6.25

2017-05-29 Thread Dimitry Andric
On 29 May 2017, at 18:53, Darko Gavrilovic wrote: > > Hello, does anyone know or able to confirm if Samba CVE-2017-7494 > affects Samba 3.6.25 on Freebsd 9.x? > > https://lists.samba.org/archive/samba-announce/2017/000406.html The advisory very clearly says "all versions of Samba from 3.5.0 onw

Re: Samba CVE-2017-7494 on 3.6.25

2017-05-29 Thread Karsten König
Hi, you could try this nmap script: https://gist.github.com/wongwaituck/62c863ba7aa28a2d22d0fe9cbe14a18b However, it does not check if the service is indeed attackable but it could be a good first hint. At the moment I does not have a FreeBSD 9 to test it, though. Best, Karsten On 29.05.2017

Samba CVE-2017-7494 on 3.6.25

2017-05-29 Thread Darko Gavrilovic
Hello, does anyone know or able to confirm if Samba CVE-2017-7494 affects Samba 3.6.25 on Freebsd 9.x? https://lists.samba.org/archive/samba-announce/2017/000406.html dg ___ freebsd-security@freebsd.org mailing list https://lists.freebsd.org/mailman

[Bug 219154] [PATCH] buffer overflows in realpath(3)

2017-05-29 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=219154 --- Comment #10 from commit-h...@freebsd.org --- A commit references this bug: Author: kib Date: Mon May 29 12:58:31 UTC 2017 New revision: 319129 URL: https://svnweb.freebsd.org/changeset/base/319129 Log: MFC r318298: Fix several buff

[Bug 219154] [PATCH] buffer overflows in realpath(3)

2017-05-29 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=219154 --- Comment #9 from commit-h...@freebsd.org --- A commit references this bug: Author: kib Date: Mon May 29 12:52:13 UTC 2017 New revision: 319126 URL: https://svnweb.freebsd.org/changeset/base/319126 Log: MFC r318298: Fix several buffe