Advisories (MDKSA-2006:120 ): samba

[aru]

Mandriva Advisories MDKSA-2006:120 : samba

 

Updated samba packages fix DoS vulnerability

July 10th, 2006

 

A vulnerability in samba 3.0.x was discovered where an attacker could

 

cause a single smbd process to bloat, exhausting memory on the system.

 

This bug is caused by continually increasing the size of an array which

 

maintains state information about the number of active share

 

connections.

 

 

 

Updated packages have been patched to correct this issue.

 

 

The released versions of Mandriva GNU/Linux affected are:

• CS3.0
  
• 10.2
  
• 2006.0
  

Full information about this advisory, including the updated packages, is available at:

www.mandriva.com/security/advisories?name=MDKSA-2006:120

 

Other references:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3403

http://www.samba.org/samba/security/CAN-2006-3403.html

 

Posted automatically by aru (mdksec2mub v: mdksec2mub,v 1.3 2006/07/02 09:40:56 aru Exp $)