Description
The Samba server on Apple Mac OS X 10.3.9 and 10.4.10, when Windows file sharing is enabled, does not enforce disk quotas after dropping privileges, which allows remote authenticated users to use disk space in excess of quota.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Wolfi
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Wolfi rolling | samba-server | 4.22.0-r0 | — |
References
- ADV-2007-2732 vdb-entry
- samba-filesystem-security-bypass(35738) vdb-entry
- APPLE-SA-2007-07-31 vendor-advisory
- http://docs.info.apple.com/article.html?artnum=306172
- 25159 vdb-entry
- 26235 third-party-advisory