Samba nttrans Reply - Integer Overflow Vulnerability

vulnerable samba daemon has a integer overflow to cause remote dos by nttrans reply while the daemon reading ealist. In the detail, unsigned data type offset variable in vulnerable function of readnttransealist can be wrap up! security bug! security bug analyze smbd/nttrans.c ---- snip ---- snip...