Signature Detail
Short Name |
SMB:EXPLOIT:LINUX-TRANS2-OF |
|---|---|
Severity |
High |
Recommended |
No |
Recommended Action |
Drop |
Category |
SMB |
Keywords |
Linux Kernel SMBFS trans2 Overflow |
Release Date |
2004/11/23 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.1.134269+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
SMB: Linux Kernel SMBFS trans2 Overflow
This signature detects attempts to exploit a known vulnerability in the Server Message Block File System (SMBFS) implemented in the Linux kernel. Kernels 2.4 and 2.6 are vulnerable. Successful attackers can gain root access on the target host.
Extended Description
The Linux kernel is reported prone to multiple remote vulnerabilities in the SMBFS network filesystem. These vulnerabilities may lead to the execution of attacker-supplied machine code, information disclosure of kernel memory, or crashes of the kernel, denying service to legitimate users. Versions of the kernel in both the 2.4 and the 2.6 series are reported prone to various issues.
Affected Products
- Avaya Modular Messaging (MSS) 1.1.0
- Avaya Modular Messaging (MSS) 2.0.0
- Debian Linux 3.0.0
- Debian Linux 3.0.0 Alpha
- Debian Linux 3.0.0 Arm
- Debian Linux 3.0.0 Hppa
- Debian Linux 3.0.0 Ia-32
- Debian Linux 3.0.0 Ia-64
- Debian Linux 3.0.0 M68k
- Debian Linux 3.0.0 Mips
- Debian Linux 3.0.0 Mipsel
- Debian Linux 3.0.0 Ppc
- Debian Linux 3.0.0 S/390
- Debian Linux 3.0.0 Sparc
- Linux kernel 2.4.0
- Linux kernel 2.4.0 .0-Test1
- Linux kernel 2.4.0 .0-Test10
- Linux kernel 2.4.0 .0-Test11
- Linux kernel 2.4.0 .0-Test12
- Linux kernel 2.4.0 .0-Test2
- Linux kernel 2.4.0 .0-Test3
- Linux kernel 2.4.0 .0-Test4
- Linux kernel 2.4.0 .0-Test5
- Linux kernel 2.4.0 .0-Test6
- Linux kernel 2.4.0 .0-Test7
- Linux kernel 2.4.0 .0-Test8
- Linux kernel 2.4.0 .0-Test9
- Linux kernel 2.4.1
- Linux kernel 2.4.10
- Linux kernel 2.4.11
- Linux kernel 2.4.12
- Linux kernel 2.4.13
- Linux kernel 2.4.14
- Linux kernel 2.4.15
- Linux kernel 2.4.16
- Linux kernel 2.4.17
- Linux kernel 2.4.18
- Linux kernel 2.4.18 Pre-1
- Linux kernel 2.4.18 Pre-2
- Linux kernel 2.4.18 Pre-3
- Linux kernel 2.4.18 Pre-4
- Linux kernel 2.4.18 Pre-5
- Linux kernel 2.4.18 Pre-6
- Linux kernel 2.4.18 Pre-7
- Linux kernel 2.4.18 Pre-8
- Linux kernel 2.4.18 X86
- Linux kernel 2.4.19
- Linux kernel 2.4.19 -Pre1
- Linux kernel 2.4.19 -Pre2
- Linux kernel 2.4.19 -Pre3
- Linux kernel 2.4.19 -Pre4
- Linux kernel 2.4.19 -Pre5
- Linux kernel 2.4.19 -Pre6
- Linux kernel 2.4.2
- Linux kernel 2.4.20
- Linux kernel 2.4.21
- Linux kernel 2.4.21 Pre1
- Linux kernel 2.4.21 Pre4
- Linux kernel 2.4.21 Pre7
- Linux kernel 2.4.22
- Linux kernel 2.4.23
- Linux kernel 2.4.23 -Ow2
- Linux kernel 2.4.23 -Pre9
- Linux kernel 2.4.24
- Linux kernel 2.4.24 -Ow1
- Linux kernel 2.4.25
- Linux kernel 2.4.26
- Linux kernel 2.4.27
- Linux kernel 2.4.27 -Pre1
- Linux kernel 2.4.27 -Pre2
- Linux kernel 2.4.27 -Pre3
- Linux kernel 2.4.27 -Pre4
- Linux kernel 2.4.27 -Pre5
- Linux kernel 2.4.3
- Linux kernel 2.4.4
- Linux kernel 2.4.5
- Linux kernel 2.4.6
- Linux kernel 2.4.7
- Linux kernel 2.4.8
- Linux kernel 2.4.9
- Linux kernel 2.6.0
- Linux kernel 2.6.0 -Test1
- Linux kernel 2.6.0 -Test10
- Linux kernel 2.6.0 -Test11
- Linux kernel 2.6.0 -Test2
- Linux kernel 2.6.0 -Test3
- Linux kernel 2.6.0 -Test4
- Linux kernel 2.6.0 -Test5
- Linux kernel 2.6.0 -Test6
- Linux kernel 2.6.0 -Test7
- Linux kernel 2.6.0 -Test8
- Linux kernel 2.6.0 -Test9
- Linux kernel 2.6.0 -Test9-CVS
- Linux kernel 2.6.1
- Linux kernel 2.6.1 -Rc1
- Linux kernel 2.6.1 -Rc2
- Linux kernel 2.6.2
- Linux kernel 2.6.3
- Linux kernel 2.6.4
- Linux kernel 2.6.5
- Linux kernel 2.6.6
- Linux kernel 2.6.6 Rc1
- Linux kernel 2.6.7
- Linux kernel 2.6.7 Rc1
- Linux kernel 2.6.8
- Linux kernel 2.6.8 Rc1
- Linux kernel 2.6.8 Rc2
- Linux kernel 2.6.8 Rc3
- Linux kernel 2.6.9
- Mandriva Corporate Server 2.1.0
- Mandriva Corporate Server 2.1.0 X86 64
- Mandriva Corporate Server 3.0.0
- Mandriva Linux Mandrake 10.0.0
- Mandriva Linux Mandrake 10.0.0 amd64
- Mandriva Linux Mandrake 10.1.0
- Mandriva Linux Mandrake 10.1.0 X86 64
- Mandriva Linux Mandrake 9.2.0
- Mandriva Linux Mandrake 9.2.0 amd64
- Mandriva Multi Network Firewall 2.0.0
- Red Hat Advanced Workstation for the Itanium Processor 2.1.0
- Red Hat Advanced Workstation for the Itanium Processor 2.1.0 IA64
- Red Hat Desktop 3.0.0
- Red Hat Enterprise Linux AS 2.1
- Red Hat Enterprise Linux AS 2.1 IA64
- Red Hat Enterprise Linux AS 3
- Red Hat Enterprise Linux ES 2.1
- Red Hat Enterprise Linux ES 2.1 IA64
- Red Hat Enterprise Linux ES 3
- Red Hat Enterprise Linux WS 2.1
- Red Hat Enterprise Linux WS 2.1 IA64
- Red Hat Enterprise Linux WS 3
- Red Hat Fedora Core1
- Red Hat Fedora Core2
- Red Hat Fedora Core3
- Red Hat Linux 7.3.0 I386
- Red Hat Linux 9.0.0 I386
- SuSE Linux 8.1.0
- SuSE Linux Desktop 1.0.0
- SuSE Linux Personal 8.2.0
- SuSE Linux Personal 9.0.0
- SuSE Linux Personal 9.0.0 X86 64
- SuSE Linux Personal 9.1.0
- SuSE Linux Personal 9.2.0
- SuSE Novell Linux Desktop 9.0.0
- SuSE SUSE Linux Enterprise Server 8
- SuSE SUSE Linux Enterprise Server 9
- Trustix Secure Enterprise Linux 2.0.0
- Trustix Secure Linux 1.5.0
- Trustix Secure Linux 2.0.0
- Trustix Secure Linux 2.1.0
- Trustix Secure Linux 2.2.0
- Ubuntu Ubuntu Linux 4.1.0 Ia32
- Ubuntu Ubuntu Linux 4.1.0 Ia64
- Ubuntu Ubuntu Linux 4.1.0 Ppc
References
- BugTraq: 11695
- CVE: CVE-2004-0949
- URL: http://xforce.iss.net/xforce/xfdb/18137
- URL: http://www.kb.cert.org/vuls/id/726198