Ubuntu
samba package

Memory exhaustion DoS against smbd

Bug #52619 reported by André Klitzing
254
Affects Status Importance Assigned to Milestone
samba (Ubuntu)
Fix Released
High
Martin Pitt

Bug Description

The smbd daemon maintains internal data structures used track
active connections to file and printer shares. In certain
circumstances an attacker may be able to continually increase
the memory usage of an smbd process by issuing a large number
of share connection requests. This defect affects all Samba
configurations.

Info:
http://us1.samba.org/samba/security/CAN-2006-3403.html

CVE References

Revision history for this message
André Klitzing (misery) wrote : samba-3.0-CAN-2006-3403.patch

Patch from Samba-Team

http://us4.samba.org/samba/ftp/patches/security/samba-3.0-CAN-2006-3403.patch

Revision history for this message
Martin Pitt (pitti) wrote :

Edgy is already fixed, and I already uploaded the -stable updates. USN will be released soon.

Changed in samba:
assignee: nobody → pitti
importance: Untriaged → High
status: Unconfirmed → Fix Committed
Revision history for this message
Martin Pitt (pitti) wrote :

This got fixed a while ago in http://www.ubuntu.com/usn/usn-314-1

Changed in samba:
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public Security information  
Everyone can see this security related information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.