[SM-Security] SECURITY UPDATE for net/samba

Eric Sandall eric at sandall.us
Mon Nov 8 16:55:00 EST 2004


Subject:        Potential Remote Denial of Service
CVE #:                CAN-2004-0930
Affected
Versions:        Samba 3.0.x <= 3.0.7

Summary:        A remote attacker could cause and smbd process
                to consume abnormal amounts of system resources
                due to an input validation error when matching
                filenames containing wildcard characters.

The following files are attached for spell net/samba:
DETAILS
HISTORY

-sandalle

--
Eric Sandall                     |  Source Mage GNU/Linux Developer
eric at sandall.us PGP: 0xA8EFDD61  |  http://www.sourcemage.org/
http://eric.sandall.us/          |  SysAdmin @ Inst. Shock Physics @ WSU
http://counter.li.org/  #196285  |  http://www.shock.wsu.edu/

----------------------------------------------------------------
This message was sent using IMP, the Internet Messaging Program.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: samba-3.0.8.tar.bz2
Type: application/x-bzip
Size: 3572 bytes
Desc: not available
Url : http://lists.ibiblio.org/pipermail/sm-security/attachments/20041108/2b06f248/attachment.bin 


More information about the SM-Security mailing list