FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2008-4314

This CVE name corresponds to:

Entered	Topic
2008-11-29	samba -- potential leakage of arbitrary memory contents

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2008-4314 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2008-4314
Phase	Assigned(20080929)

Description

smbd in Samba 3.0.29 through 3.2.4 might allow remote attackers to read arbitrary memory and cause a denial of service via crafted (1) trans, (2) trans2, and (3) nttrans requests, related to a "cut&paste error" that causes an improper bounds check to be performed.

References

Source	Reference
CONFIRM	http://us1.samba.org/samba/ftp/patches/security/samba-3.0.32-CVE-2008-4314.patch
CONFIRM	http://us1.samba.org/samba/security/CVE-2008-4314.html
FEDORA	FEDORA-2008-10518
FEDORA	FEDORA-2008-10638
HP	HPSBTU02454
HP	SSRT080172
SLACKWARE	SSA:2008-333-01
SUNALERT	249087
SUSE	SUSE-SR:2008:027
UBUNTU	USN-680-1
BID	32494
SECUNIA	36281
VUPEN	ADV-2008-3277
VUPEN	ADV-2009-0067
OSVDB	50230
SECTRACK	1021287
SECUNIA	32813
SECUNIA	32919
SECUNIA	32951
SECUNIA	32968
VUPEN	ADV-2009-2245