Published: 07/10/2009 Updated: 13/02/2023

CVSS v2 Base Score: 4 | Impact Score: 2.9 | Exploitability Score: 8

VMScore: 356

Vector: AV:N/AC:L/Au:S/C:N/I:N/A:P

smbd in Samba 3.0 prior to 3.0.37, 3.2 prior to 3.2.15, 3.3 prior to 3.3.8, and 3.4 prior to 3.4.2 allows remote authenticated users to cause a denial of service (infinite loop) via an unanticipated oplock break notification reply packet.

Vulnerable Product	Search on Vulmon	Subscribe to Product
samba samba 3.4.0
samba samba 3.4.1
samba samba
canonical ubuntu linux 9.04
canonical ubuntu linux 8.10
canonical ubuntu linux 8.04
canonical ubuntu linux 6.06

Debian Bug report logs - #550423 samba: CVE-2009-2906 dos and CVE-2009-2948 password access Package: samba; Maintainer for samba is Debian Samba Maintainers <pkg-samba-maint@listsaliothdebianorg>; Source for samba is src:samba (PTS, buildd, popcon) Reported by: Michael S Gilbert <michaelsgilbert@gmailcom> Date: ...

J David Hester discovered that Samba incorrectly handled users that lack home directories when the automated [homes] share is enabled An authenticated user could connect to that share name and gain access to the whole filesystem (CVE-2009-2813) ...

Several vulnerabilities have been discovered in samba, an implementation of the SMB/CIFS protocol for Unix systems, providing support for cross-platform file and printer sharing with other operating systems and more The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2009-2948 The mountcifs utility is missing ...

CWE-835 http://secunia.com/advisories/36893 http://secunia.com/advisories/36918 http://secunia.com/advisories/36937 http://samba.org/samba/security/CVE-2009-2906.html http://www.securitytracker.com/id?1022976 http://www.securityfocus.com/bid/36573 https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00095.html http://osvdb.org/58519 http://www.vupen.com/english/advisories/2009/2810 http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.561439 https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00098.html http://secunia.com/advisories/36953 http://www.ubuntu.com/usn/USN-839-1 http://news.samba.org/releases/3.0.37/http://news.samba.org/releases/3.2.15/http://news.samba.org/releases/3.4.2/http://news.samba.org/releases/3.3.8/http://wiki.rpath.com/Advisories:rPSA-2009-0145 http://secunia.com/advisories/37428 http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html http://support.apple.com/kb/HT4077 http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021111.1-1 https://exchange.xforce.ibmcloud.com/vulnerabilities/53575 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9944 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7090 http://www.securityfocus.com/archive/1/507856/100/0/threaded https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=550423 https://nvd.nist.gov https://usn.ubuntu.com/839-1/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2009-2906

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect