CVE-2010-3069

Publication date 14 September 2010

Last updated 24 July 2024

Ubuntu priority

Medium

Why this priority?

Stack-based buffer overflow in the (1) sid_parse and (2) dom_sid_parse functions in Samba before 3.5.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted Windows Security ID (SID) on a file share.

Status

No maintained releases are affected by this CVE.

Package Ubuntu Release Status
samba 10.04 LTS lucid
Fixed 2:3.4.7~dfsg-1ubuntu3.2
9.10 karmic
Fixed 2:3.4.0-3ubuntu5.7
9.04 jaunty
Fixed 2:3.3.2-1ubuntu3.6
8.04 LTS hardy
Fixed 3.0.28a-1ubuntu4.13
6.06 LTS dapper
Fixed 3.0.22-1ubuntu3.13

References

Related Ubuntu Security Notices (USN)

    • USN-987-1
    • Samba vulnerability
    • 14 September 2010

Other references