Lucene search

K
centosCentOS ProjectCESA-2006:0591-6
HistoryJul 26, 2006 - 5:58 a.m.

samba security update

2006-07-2605:58:35
CentOS Project
lists.centos.org
39

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.185 Low

EPSS

Percentile

96.1%

CentOS Errata and Security Advisory CESA-2006:0591-6

Samba provides file and printer sharing services to SMB/CIFS clients.

A denial of service bug was found in the way the smbd daemon tracks active
connections to shares. It was possible for a remote attacker to cause the
smbd daemon to consume a large amount of system memory by sending carefully
crafted smb requests. (CVE-2006-3403)

Users of Samba are advised to upgrade to these packages, which
contain a backported patch to correct this issue.

Merged security bulletin from advisories:
https://lists.centos.org/pipermail/centos-announce/2006-July/075230.html

Affected packages:
samba
samba-client
samba-common
samba-swat

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.185 Low

EPSS

Percentile

96.1%