User Tools

Site Tools


howto:sambasecurityfix

Samba Security Fix

Introduction

Samba in stock Xandros on the 701 is vulnerable to Samba lsa_io_trans_names Heap Overflow. Samba is running by default on stock Xandros, so that means you're open to attackers when you're connecting to Internet without firewall. You can read more about it here: http://risesecurity.org/blog/entry/6/

This issue may be fixed on the 900 through the eeepc-security-update-1 package. (apt-get upgrade)

Fix

Here's idiot proof guide in installing the security fix for samba:

1. Make sure you're connected to internet

2. Open terminal by CTRL+ALT+T

3. write following commands (you can copy&paste):

wget http://ftp.linux.hr/asuseee/xandros/binary/samba-common_3.0.24-7eee_i386.deb
wget http://ftp.linux.hr/asuseee/xandros/binary/samba_3.0.24-7eee_i386.deb
wget http://ftp.linux.hr/asuseee/xandros/binary/smbclient_3.0.24-7eee_i386.deb
wget http://ftp.linux.hr/asuseee/xandros/binary/smbfs_3.0.24-7eee_i386.deb
sudo dpkg -i samba-common_3.0.24-7eee_i386.deb samba_3.0.24-7eee_i386.deb 
sudo dpkg -i smbclient_3.0.24-7eee_i386.deb smbfs_3.0.24-7eee_i386.deb
rm samba-common_3.0.24-7eee_i386.deb samba_3.0.24-7eee_i386.deb 
rm smbclient_3.0.24-7eee_i386.deb smbfs_3.0.24-7eee_i386.deb

References

ASUS Eee PC rooted out of the box: http://risesecurity.org/blog/entry/6/

Security issues with Stock OS: http://forum.eeeuser.com/viewtopic.php?id=14237

ASUS Eee PC rooted out of the box: http://forum.eeeuser.com/viewtopic.php?id=14287

howto/sambasecurityfix.txt · Last modified: 2008/06/21 16:03 by matrixcat