Test ID:	1.3.6.1.4.1.25623.1.0.57098
Category:	Mandrake Local Security Checks
Title:	Mandrake Security Advisory MDKSA-2006:120 (samba)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to samba announced via advisory MDKSA-2006:120. A vulnerability in samba 3.0.x was discovered where an attacker could cause a single smbd process to bloat, exhausting memory on the system. This bug is caused by continually increasing the size of an array which maintains state information about the number of active share connections. Updated packages have been patched to correct this issue. Affected: 10.2, 2006.0, Corporate 3.0 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. https://secure1.securityspace.com/smysecure/catid.html?in=MDKSA-2006:120 http://www.samba.org/samba/security/CAN-2006-3403.html Risk factor : Medium CVSS Score: 5.0
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2006-3403 http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html BugTraq ID: 18927 http://www.securityfocus.com/bid/18927 Bugtraq: 20060710 Re: [ANNOUNCEMENT] Samba 3.0.1 - 3.0.22: memory exhaustion DoS against smbd (Google Search) http://www.securityfocus.com/archive/1/439875/100/0/threaded Bugtraq: 20060710 [ANNOUNCEMENT] Samba 3.0.1 - 3.0.22: memory exhaustion DoS against smbd (Google Search) http://www.securityfocus.com/archive/1/439757/100/0/threaded Bugtraq: 20060711 rPSA-2006-0128-1 samba samba-swat (Google Search) http://www.securityfocus.com/archive/1/439880/100/100/threaded Bugtraq: 20060720 Samba Internal Data Structures DOS Vulnerability Exploit (Google Search) http://www.securityfocus.com/archive/1/440767/100/0/threaded Bugtraq: 20060721 Re: Samba Internal Data Structures DOS Vulnerability Exploit (Google Search) http://www.securityfocus.com/archive/1/440836/100/0/threaded Bugtraq: 20061113 VMSA-2006-0006 - VMware ESX Server 2.5.3 Upgrade Patch 4 (Google Search) http://www.securityfocus.com/archive/1/451404/100/0/threaded Bugtraq: 20061113 VMSA-2006-0007 - VMware ESX Server 2.1.3 Upgrade Patch 2 (Google Search) http://www.securityfocus.com/archive/1/451417/100/200/threaded Bugtraq: 20061113 VMSA-2006-0008 - VMware ESX Server 2.0.2 Upgrade Patch 2 (Google Search) http://www.securityfocus.com/archive/1/451426/100/200/threaded Cert/CC Advisory: TA06-333A http://www.us-cert.gov/cas/techalerts/TA06-333A.html CERT/CC vulnerability note: VU#313836 http://www.kb.cert.org/vuls/id/313836 Debian Security Information: DSA-1110 (Google Search) http://www.debian.org/security/2006/dsa-1110 http://security.gentoo.org/glsa/glsa-200607-10.xml HPdes Security Advisory: HPSBUX02155 http://www.securityfocus.com/archive/1/448957/100/0/threaded HPdes Security Advisory: SSRT061235 http://www.mandriva.com/security/advisories?name=MDKSA-2006:120 http://securitydot.net/xpl/exploits/vulnerabilities/articles/1175/exploit.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11355 http://www.redhat.com/support/errata/RHSA-2006-0591.html http://securitytracker.com/id?1016459 http://secunia.com/advisories/20980 http://secunia.com/advisories/20983 http://secunia.com/advisories/21018 http://secunia.com/advisories/21019 http://secunia.com/advisories/21046 http://secunia.com/advisories/21086 http://secunia.com/advisories/21143 http://secunia.com/advisories/21159 http://secunia.com/advisories/21187 http://secunia.com/advisories/21190 http://secunia.com/advisories/21262 http://secunia.com/advisories/22875 http://secunia.com/advisories/23155 SGI Security Advisory: 20060703-01-P ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.416876 SuSE Security Announcement: SUSE-SR:2006:017 (Google Search) http://www.novell.com/linux/security/advisories/2006_17_sr.html http://www.ubuntu.com/usn/usn-314-1 http://www.vupen.com/english/advisories/2006/2745 http://www.vupen.com/english/advisories/2006/4502 http://www.vupen.com/english/advisories/2006/4750 XForce ISS Database: samba-smbd-connection-dos(27648) https://exchange.xforce.ibmcloud.com/vulnerabilities/27648
Copyright	Copyright (c) 2006 E-Soft Inc. http://www.securityspace.com

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.