sm-security AT lists.ibiblio.org

Subject: Security bugs are reported here via bugzilla

List archive

[SM-Security] SECURITY UPDATE for net/samba

From: Eric Sandall <eric AT sandall.us>
To: sm-security AT lists.ibiblio.org
Subject: [SM-Security] SECURITY UPDATE for net/samba
Date: Mon, 8 Nov 2004 13:55:00 -0800

Subject: Potential Remote Denial of Service
CVE #: CAN-2004-0930
Affected
Versions: Samba 3.0.x <= 3.0.7

Summary: A remote attacker could cause and smbd process
to consume abnormal amounts of system resources
due to an input validation error when matching
filenames containing wildcard characters.

The following files are attached for spell net/samba:
DETAILS
HISTORY

-sandalle

--
Eric Sandall | Source Mage GNU/Linux Developer
eric AT sandall.us PGP: 0xA8EFDD61 | http://www.sourcemage.org/
http://eric.sandall.us/ | SysAdmin @ Inst. Shock Physics @ WSU
http://counter.li.org/ #196285 | http://www.shock.wsu.edu/

----------------------------------------------------------------
This message was sent using IMP, the Internet Messaging Program.

Attachment: samba-3.0.8.tar.bz2
Description: application/bzip

[SM-Security] SECURITY UPDATE for net/samba, Eric Sandall, 11/08/2004