samba security update

2006-07-2519:41:38

CentOS Project

lists.centos.org

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.185 Low

EPSS

Percentile

96.2%

JSON

CentOS Errata and Security Advisory CESA-2006:0591

Samba provides file and printer sharing services to SMB/CIFS clients.

A denial of service bug was found in the way the smbd daemon tracks active
connections to shares. It was possible for a remote attacker to cause the
smbd daemon to consume a large amount of system memory by sending carefully
crafted smb requests. (CVE-2006-3403)

Users of Samba are advised to upgrade to these packages, which
contain a backported patch to correct this issue.

Affected packages:
samba
samba-client
samba-common
samba-swat

Upstream details at:
https://access.redhat.com/errata/RHSA-2006:0591

OSVersionArchitecturePackageVersionFilename
CentOS3ia64samba< 3.0.9-1.3E.10samba-3.0.9-1.3E.10.ia64.rpm
CentOS3ia64samba-client< 3.0.9-1.3E.10samba-client-3.0.9-1.3E.10.ia64.rpm
CentOS3ia64samba-common< 3.0.9-1.3E.10samba-common-3.0.9-1.3E.10.ia64.rpm
CentOS3ia64samba-swat< 3.0.9-1.3E.10samba-swat-3.0.9-1.3E.10.ia64.rpm
CentOS4ia64samba< 3.0.10-1.4E.6.2samba-3.0.10-1.4E.6.2.ia64.rpm
CentOS4ia64samba-client< 3.0.10-1.4E.6.2samba-client-3.0.10-1.4E.6.2.ia64.rpm
CentOS4ia64samba-common< 3.0.10-1.4E.6.2samba-common-3.0.10-1.4E.6.2.ia64.rpm
CentOS4ia64samba-swat< 3.0.10-1.4E.6.2samba-swat-3.0.10-1.4E.6.2.ia64.rpm
CentOS4alphasamba< 3.0.10-1.4E.6.2samba-3.0.10-1.4E.6.2.alpha.rpm
CentOS4alphasamba-client< 3.0.10-1.4E.6.2samba-client-3.0.10-1.4E.6.2.alpha.rpm

OS	Version	Architecture	Package	Version	Filename
CentOS	3	ia64	samba	< 3.0.9-1.3E.10	samba-3.0.9-1.3E.10.ia64.rpm
CentOS	3	ia64	samba-client	< 3.0.9-1.3E.10	samba-client-3.0.9-1.3E.10.ia64.rpm
CentOS	3	ia64	samba-common	< 3.0.9-1.3E.10	samba-common-3.0.9-1.3E.10.ia64.rpm
CentOS	3	ia64	samba-swat	< 3.0.9-1.3E.10	samba-swat-3.0.9-1.3E.10.ia64.rpm
CentOS	4	ia64	samba	< 3.0.10-1.4E.6.2	samba-3.0.10-1.4E.6.2.ia64.rpm
CentOS	4	ia64	samba-client	< 3.0.10-1.4E.6.2	samba-client-3.0.10-1.4E.6.2.ia64.rpm
CentOS	4	ia64	samba-common	< 3.0.10-1.4E.6.2	samba-common-3.0.10-1.4E.6.2.ia64.rpm
CentOS	4	ia64	samba-swat	< 3.0.10-1.4E.6.2	samba-swat-3.0.10-1.4E.6.2.ia64.rpm
CentOS	4	alpha	samba	< 3.0.10-1.4E.6.2	samba-3.0.10-1.4E.6.2.alpha.rpm
CentOS	4	alpha	samba-client	< 3.0.10-1.4E.6.2	samba-client-3.0.10-1.4E.6.2.alpha.rpm