Nessus and Samba

mnauta · 10-13-2006, 11:15 AM

Hi,

I ran the family Gain Root Remotely in Nessus 3.03 Build W334 against a FC4 with Samba version 3.0.23a-1.fc4.1.

The report read:

Code:

The remote Samba server is vulnerable to a buffer overflow
when it processes the function trans2open().

An attacker may exploit this flaw to gain a root shell on
this host.

Solution: upgrade to Samba 2.2.8a or 3.0.0

Risk Factor : High
CVE : CVE-2003-0201, CVE-2003-0196
BID : 7294, 7295
Plugin ID : 11523

Nessus either incorrectly identified Samba version or the vulnerability? I have done the pligin updates. Any suggestions what I migt be doing wrong?

Thanks

unSpawn · 10-16-2006, 03:58 PM

Any suggestions what I migt be doing wrong?
If your upgraded Samba included a fix for trans2open() (rpm -q with the --changelog arg) then you haven't done something wrong but the plugin did.