|
|
Family: Gentoo Local Security Checks --> Category: infos
[GLSA-200607-10] Samba: Denial of Service vulnerability Vulnerability Scan
Vulnerability Scan Summary
Samba: Denial of Service vulnerability
Detailed Explanation for this Vulnerability Test
The remote host is affected by the vulnerability described in GLSA-200607-10
(Samba: Denial of Service vulnerability)
During an internal audit the Samba team discovered that a flaw in the
way Samba stores share connection requests could lead to a Denial of
Service.
Impact
By sending a large amount of share connection requests to a vulnerable
Samba server, a possible hacker could cause a Denial of Service due to memory
consumption.
Workaround
There is no known workaround at this time.
References:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3403
Solution:
All Samba users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=net-fs/samba-3.0.22-r3"
Threat Level: Medium
Click HERE for more information and discussions on this network vulnerability scan.
|
