Test ID:	1.3.6.1.4.1.25623.1.0.57107
Category:	Debian Local Security Checks
Title:	Debian Security Advisory DSA 1110-1 (samba)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to samba announced via advisory DSA 1110-1. Gerald Carter discovered that the smbd daemon from Samba, a free implementation of the SMB/CIFS protocol, imposes insufficient limits in the code to handle shared connections, which can be exploited to exhaust system memory by sending maliciously crafted requests, leading to denial of service. For the stable distribution (sarge) this problem has been fixed in version 3.0.14a-3sarge2. For the unstable distribution (sid) this problem will be fixed soon. We recommend that you upgrade your samba package. Solution: https://secure1.securityspace.com/smysecure/catid.html?in=DSA%201110-1 CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2006-3403 http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html BugTraq ID: 18927 http://www.securityfocus.com/bid/18927 Bugtraq: 20060710 Re: [ANNOUNCEMENT] Samba 3.0.1 - 3.0.22: memory exhaustion DoS against smbd (Google Search) http://www.securityfocus.com/archive/1/439875/100/0/threaded Bugtraq: 20060710 [ANNOUNCEMENT] Samba 3.0.1 - 3.0.22: memory exhaustion DoS against smbd (Google Search) http://www.securityfocus.com/archive/1/439757/100/0/threaded Bugtraq: 20060711 rPSA-2006-0128-1 samba samba-swat (Google Search) http://www.securityfocus.com/archive/1/439880/100/100/threaded Bugtraq: 20060720 Samba Internal Data Structures DOS Vulnerability Exploit (Google Search) http://www.securityfocus.com/archive/1/440767/100/0/threaded Bugtraq: 20060721 Re: Samba Internal Data Structures DOS Vulnerability Exploit (Google Search) http://www.securityfocus.com/archive/1/440836/100/0/threaded Bugtraq: 20061113 VMSA-2006-0006 - VMware ESX Server 2.5.3 Upgrade Patch 4 (Google Search) http://www.securityfocus.com/archive/1/451404/100/0/threaded Bugtraq: 20061113 VMSA-2006-0007 - VMware ESX Server 2.1.3 Upgrade Patch 2 (Google Search) http://www.securityfocus.com/archive/1/451417/100/200/threaded Bugtraq: 20061113 VMSA-2006-0008 - VMware ESX Server 2.0.2 Upgrade Patch 2 (Google Search) http://www.securityfocus.com/archive/1/451426/100/200/threaded Cert/CC Advisory: TA06-333A http://www.us-cert.gov/cas/techalerts/TA06-333A.html CERT/CC vulnerability note: VU#313836 http://www.kb.cert.org/vuls/id/313836 Debian Security Information: DSA-1110 (Google Search) http://www.debian.org/security/2006/dsa-1110 http://security.gentoo.org/glsa/glsa-200607-10.xml HPdes Security Advisory: HPSBUX02155 http://www.securityfocus.com/archive/1/448957/100/0/threaded HPdes Security Advisory: SSRT061235 http://www.mandriva.com/security/advisories?name=MDKSA-2006:120 http://securitydot.net/xpl/exploits/vulnerabilities/articles/1175/exploit.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11355 http://www.redhat.com/support/errata/RHSA-2006-0591.html http://securitytracker.com/id?1016459 http://secunia.com/advisories/20980 http://secunia.com/advisories/20983 http://secunia.com/advisories/21018 http://secunia.com/advisories/21019 http://secunia.com/advisories/21046 http://secunia.com/advisories/21086 http://secunia.com/advisories/21143 http://secunia.com/advisories/21159 http://secunia.com/advisories/21187 http://secunia.com/advisories/21190 http://secunia.com/advisories/21262 http://secunia.com/advisories/22875 http://secunia.com/advisories/23155 SGI Security Advisory: 20060703-01-P ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.416876 SuSE Security Announcement: SUSE-SR:2006:017 (Google Search) http://www.novell.com/linux/security/advisories/2006_17_sr.html http://www.ubuntu.com/usn/usn-314-1 http://www.vupen.com/english/advisories/2006/2745 http://www.vupen.com/english/advisories/2006/4502 http://www.vupen.com/english/advisories/2006/4750 XForce ISS Database: samba-smbd-connection-dos(27648) https://exchange.xforce.ibmcloud.com/vulnerabilities/27648
Copyright	Copyright (c) 2006 E-Soft Inc. http://www.securityspace.com

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.