Samba: Denial of Service vulnerabilities [LWN.net]

Package(s):

samba

CVE #(s):

CAN-2004-0807 CAN-2004-0808

Created:

September 13, 2004

Updated:

September 22, 2004

Description:

There is a defect in smbd's ASN.1 parsing. A bad packet received during the authentication request could throw newly-spawned smbd processes into an infinite loop (CAN-2004-0807). Another defect was found in nmbd's processing of mailslot packets, where a bad NetBIOS request could crash the nmbd process (CAN-2004-0808). See this advisory for details.

Alerts:

Red Hat	RHSA-2004:467-01	2004-09-22
OpenPKG	OpenPKG-SA-2004.040	2004-09-15
Trustix	TSLSA-2004-0046	2004-09-14
Slackware	SSA:2004-257-01	2004-09-13
Mandrake	MDKSA-2004:092	2004-09-13
Fedora	FEDORA-2004-305	2004-09-13
Fedora	FEDORA-2004-304	2004-09-13
Gentoo	200409-16	2004-09-13

(Log in to post comments)