Description
Smb4K before 0.8.0 allow local users, when present on the Smb4K sudoers list, to kill arbitrary processes, related to a "design issue with smb4k_kill."
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | smb4k | 0.8.1-1 | — |
| Debian 13 | smb4k | 0.8.1-1 | — |
References
- 23984 third-party-advisory
- [smb4k-announce] 20061221 Smb4K 0.8.0 and security fixes released mailing-list
- SUSE-SR:2007:002 vendor-advisory
- http://developer.berlios.de/bugs/?func=detailbug&bug_id=9631&group_id=769
- http://developer.berlios.de/project/shownotes.php?release_id=9777
- 22299 vdb-entry
- 24111 third-party-advisory
- 24469 third-party-advisory
- ADV-2007-0393 vdb-entry
- GLSA-200703-09 vendor-advisory
- 23937 third-party-advisory
- http://developer.berlios.de/project/shownotes.php?release_id=11902
- http://developer.berlios.de/project/shownotes.php?release_id=11706
- MDKSA-2007:042 vendor-advisory