Memory exhaustion DoS against smbd

Description The smbd daemon maintains internal data structures used track active connections to file and printer shares. In certain circumstances an attacker may be able to continually increase the memory usage of an smbd process by issuing a large number of share connection requests. This defect...

FreeBSD : smbd -- buffer-overrun vulnerability (f3d3f621-38d8-11d9-8fff-000c6e8f12ef)

Caused by improper bounds checking of certain trans2 requests, there is a possible buffer overrun in smbd. The attacker needs to be able to create files with very specific Unicode filenames on the share to take advantage of this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

FreeBSD : samba -- integer overflow vulnerability (3b3676be-52e1-11d9-a9e7-0001020eed82)

Greg MacManus, iDEFENSE Labs reports : Remote exploitation of an integer overflow vulnerability in the smbd daemon included in Samba 2.0.x, Samba 2.2.x, and Samba 3.0.x prior to and including 3.0.9 could allow an attacker to cause controllable heap corruption, leading to execution of arbitrary...

iDEFENSE Security Advisory 12.16.04: Samba smbd Security Descriptor Integer Overflow Vulnerability

Samba smbd Security Descriptor Integer Overflow Vulnerability iDEFENSE Security Advisory 12.16.04 http://www.idefense.com/application/poi/display?id=165 December 16, 2004 I. BACKGROUND Samba is an open source implementation of the SMB/CIFS protocol which allows Windows clients to use resources on...

smbd -- buffer-overrun vulnerability

Caused by improper bounds checking of certain trans2 requests, there is a possible buffer overrun in smbd. The attacker needs to be able to create files with very specific Unicode filenames on the share to take advantage of this issue...

Important: Red Hat Security Advisory: samba security update

Updated samba packages that fix two denial of service vulnerabilities are now available. Updated 23rd September 2004 Packages have been updated to include the ppc64 packages which were left out of the initial errata. Samba provides file and printer sharing services to SMB/CIFS clients. The Samba...

Multiple Samba bugs

DoS against NetBIOS name service nmbd, endless loop in SMBD...

Samba: Denial of Service vulnerabilities

Background Samba is a freely available SMB/CIFS implementation which allows seamless interoperability of file and print services to other SMB/CIFS clients. smbd and nmbd are two daemons used by the Samba server. Description There is a defect in smbd's ASN.1 parsing. A bad packet received during t...

samba3 DoS attack

Code found in nmbd and smbd may allow a remote attacker to effectively crash the nmbd server or use the smbd server to exhaust the system memory...

Potential Buffer Overrun in smbd

Description A buffer overrun has been located in the code used to support the 'mangling method = hash' smb.conf option. Please be aware that the default setting for this parameter is 'mangling method = hash2' and therefore not vulnerable. Affected Samba 3 installations can avoid this possible...

CVE-1999-0811

Buffer overflow in Samba smbd program via a malformed message command...

CVE-1999-0811

The CVE-1999-0811 entry concerns Samba smbd and a buffer overflow caused by a malformed message command. Connected sources (Red Hat CVE entry, OpenVAS NASL, CVE records) corroborate that Samba is prone to a buffer overflow, but no product version ranges, root-cause specifics beyond the malformed ...