[Samba] Re: Samba-2.2.x and CAN-2004-0930 & CAN-2004-0882 ?

[Ville Herva]

On Wed, Nov 17, 2004 at 09:29:07AM +0200, you [Ville Herva] wrote:
> Can someone confirm that Samba 2.2.x is not vulnerable to the recently
> announced vulnerabilities CAN-2004-0930 and CAN-2004-0882?

Judging from http://rhn.redhat.com/errata/RHSA-2004-632.html 2.2.12 is
vulnerable - at least RH includes patches for both issues in their new
RHEL2.1 errata package (I don't know if they researched whether or not both
are exploitable with 2.2.x code base.)


-- v --

v at iki.fi