Lucene search

K
sambaSamba SecuritySAMBA:CVE-2006-3403
HistoryJul 10, 2006 - 12:00 a.m.

Memory exhaustion DoS against smbd

2006-07-1000:00:00
Samba Security
www.samba.org
22

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.185 Low

EPSS

Percentile

96.1%

Description

The smbd daemon maintains internal data structures used track
active connections to file and printer shares. In certain
circumstances an attacker may be able to continually increase
the memory usage of an smbd process by issuing a large number
of share connection requests. This defect affects all Samba
configurations.

Patch Availability

A patch for Samba 3.0.1 - 3.0.22 has been posted at
http://www.samba.org/samba/security/.

Guidelines for securing Samba hosts are listed at
http://www.samba.org/samba/docs/server_security.html

Credits

This security issue discovered during an internal security
audit of the Samba source code by the Samba Team.

== Our Code, Our Bugs, Our Responsibility.
== The Samba Team

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.185 Low

EPSS

Percentile

96.1%