Lucene search

K
ubuntuUbuntuUSN-314-1
HistoryJul 13, 2006 - 12:00 a.m.

samba vulnerability

2006-07-1300:00:00
ubuntu.com
33

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

5.9

Confidence

Low

EPSS

0.185

Percentile

96.2%

Releases

  • Ubuntu 6.06
  • Ubuntu 5.10
  • Ubuntu 5.04

Details

The Samba security team reported a Denial of Service vulnerability in
the handling of information about active connections. In certain
circumstances an attacker could continually increase the memory usage
of the smbd process by issuing a large number of share connection
requests. By draining all available memory, this could be exploited to
render the remote Samba server unusable.

OSVersionArchitecturePackageVersionFilename
Ubuntu6.06noarchsamba< 3.0.22-1ubuntu3.1UNKNOWN
Ubuntu5.10noarchsamba< 3.0.14a-6ubuntu1.1UNKNOWN
Ubuntu5.04noarchsamba< 3.0.10-1ubuntu3.1UNKNOWN

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

5.9

Confidence

Low

EPSS

0.185

Percentile

96.2%