Published: 12/07/2006 Updated: 18/10/2018

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 445

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

Subscribe to Samba

The smdb daemon (smbd/service.c) in Samba 3.0.1 up to and including 3.0.22 allows remote malicious users to cause a denial of service (memory consumption) via a large number of share connection requests.

Vulnerable Product	Search on Vulmon	Subscribe to Product
samba samba 3.0.13
samba samba 3.0.14
samba samba 3.0.2
samba samba 3.0.20a
samba samba 3.0.3
samba samba 3.0.4
samba samba 3.0.1
samba samba 3.0.10
samba samba 3.0.16
samba samba 3.0.17
samba samba 3.0.21a
samba samba 3.0.21b
samba samba 3.0.8
samba samba 3.0.9
samba samba 3.0.14a
samba samba 3.0.15
samba samba 3.0.20b
samba samba 3.0.21
samba samba 3.0.5
samba samba 3.0.6
samba samba 3.0.7
samba samba 3.0.11
samba samba 3.0.12
samba samba 3.0.18
samba samba 3.0.19
samba samba 3.0.21c
samba samba 3.0.22

Debian Bug report logs - #378070 CVE-2006-3403: Memory exhaustion DoS against smbd Package: samba; Maintainer for samba is Debian Samba Maintainers <pkg-samba-maint@listsaliothdebianorg>; Source for samba is src:samba (PTS, buildd, popcon) Reported by: Geoff Crompton <geoffcrompton@strategicdatacomau> Date: Thu ...

The Samba security team reported a Denial of Service vulnerability in the handling of information about active connections In certain circumstances an attacker could continually increase the memory usage of the smbd process by issuing a large number of share connection requests By draining all available memory, this could be exploited to render ...

NVD-CWE-Other http://www.samba.org/samba/security/CAN-2006-3403.html http://www.securityfocus.com/bid/18927 http://secunia.com/advisories/20980 http://secunia.com/advisories/20983 http://www.debian.org/security/2006/dsa-1110 http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.416876 http://www.ubuntu.com/usn/usn-314-1 http://securitytracker.com/id?1016459 http://secunia.com/advisories/21018 http://secunia.com/advisories/21019 http://secunia.com/advisories/21046 http://secunia.com/advisories/21086 http://securitydot.net/xpl/exploits/vulnerabilities/articles/1175/exploit.html http://www.kb.cert.org/vuls/id/313836 http://secunia.com/advisories/21143 http://security.gentoo.org/glsa/glsa-200607-10.xml http://www.redhat.com/support/errata/RHSA-2006-0591.html http://www.novell.com/linux/security/advisories/2006_17_sr.html http://secunia.com/advisories/21187 http://secunia.com/advisories/21190 http://secunia.com/advisories/21159 ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc http://secunia.com/advisories/21262 http://www.vmware.com/download/esx/esx-202-200610-patch.html http://www.vmware.com/download/esx/esx-213-200610-patch.html http://secunia.com/advisories/22875 http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html http://www.us-cert.gov/cas/techalerts/TA06-333A.html http://secunia.com/advisories/23155 http://www.mandriva.com/security/advisories?name=MDKSA-2006:120 http://www.vupen.com/english/advisories/2006/2745 http://www.vupen.com/english/advisories/2006/4502 http://www.vupen.com/english/advisories/2006/4750 http://docs.info.apple.com/article.html?artnum=304829 https://exchange.xforce.ibmcloud.com/vulnerabilities/27648 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11355 http://www.securityfocus.com/archive/1/451426/100/200/threaded http://www.securityfocus.com/archive/1/451417/100/200/threaded http://www.securityfocus.com/archive/1/451404/100/0/threaded http://www.securityfocus.com/archive/1/448957/100/0/threaded http://www.securityfocus.com/archive/1/440836/100/0/threaded http://www.securityfocus.com/archive/1/440767/100/0/threaded http://www.securityfocus.com/archive/1/439880/100/100/threaded http://www.securityfocus.com/archive/1/439875/100/0/threaded http://www.securityfocus.com/archive/1/439757/100/0/threaded https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=378070 https://usn.ubuntu.com/314-1/https://nvd.nist.gov https://www.kb.cert.org/vuls/id/313836

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook