National Cyber Awareness System

Vulnerability Summary for CVE-2007-0452

Overview

smbd in Samba 3.0.6 through 3.0.23d allows remote authenticated users to cause a denial of service (memory and CPU exhaustion) by renaming a file in a way that prevents a request from being removed from the deferred open queue, which triggers an infinite loop.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: BUGTRAQ

Name: 20070205 [SAMBA-SECURITY] CVE-2007-0452: Potential DoS against smbd in Samba 3.0.6 - 3.0.23d

Type: Advisory; Patch Information; Exploit

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/459167/100/0/threaded

External Source: VUPEN

Name: ADV-2007-1278

Hyperlink:http://www.vupen.com/english/advisories/2007/1278

External Source: VUPEN

Name: ADV-2007-0483

Hyperlink:http://www.vupen.com/english/advisories/2007/0483

External Source: OVAL

Name: oval:org.mitre.oval:def:9758

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9758

External Source: OSVDB

Name: 33100

Hyperlink:http://osvdb.org/33100

External Source: HP

Name: HPSBUX02204

Hyperlink:http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00943462

External Source: HP

Name: HPSBUX02204

Hyperlink:http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00943462

External Source: CONFIRM

Name: https://issues.rpath.com/browse/RPL-1005

Hyperlink:https://issues.rpath.com/browse/RPL-1005

External Source: XF

Name: samba-smbd-filerename-dos(32301)

Hyperlink:http://xforce.iss.net/xforce/xfdb/32301

External Source: UBUNTU

Name: USN-419-1

Hyperlink:http://www.ubuntu.com/usn/usn-419-1

External Source: TRUSTIX

Name: 2007-0007

Hyperlink:http://www.trustix.org/errata/2007/0007

External Source: BID

Name: 22395

Hyperlink:http://www.securityfocus.com/bid/22395

External Source: BUGTRAQ

Name: 20070207 rPSA-2007-0026-1 samba samba-swat

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/459365/100/0/threaded

External Source: REDHAT

Name: RHSA-2007:0061

Hyperlink:http://www.redhat.com/support/errata/RHSA-2007-0061.html

External Source: REDHAT

Name: RHSA-2007:0060

Hyperlink:http://www.redhat.com/support/errata/RHSA-2007-0060.html

External Source: MANDRIVA

Name: MDKSA-2007:034

Hyperlink:http://www.mandriva.com/security/advisories?name=MDKSA-2007:034

External Source: GENTOO

Name: GLSA-200702-01

Hyperlink:http://www.gentoo.org/security/en/glsa/glsa-200702-01.xml

External Source: DEBIAN

Name: DSA-1257

Hyperlink:http://www.debian.org/security/2007/dsa-1257

External Source: CONFIRM

Name: http://us1.samba.org/samba/security/CVE-2007-0452.html

Hyperlink:http://us1.samba.org/samba/security/CVE-2007-0452.html

External Source: SUNALERT

Name: 200588

Hyperlink:http://sunsolve.sun.com/search/document.do?assetkey=1-66-200588-1

External Source: SLACKWARE

Name: SSA:2007-038-01

Hyperlink:http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.476916

External Source: SECTRACK

Name: 1017587

Hyperlink:http://securitytracker.com/id?1017587

External Source: SREASON

Name: 2219

Hyperlink:http://securityreason.com/securityalert/2219

External Source: SECUNIA

Name: 24792

Hyperlink:http://secunia.com/advisories/24792

External Source: SECUNIA

Name: 24284

Hyperlink:http://secunia.com/advisories/24284

External Source: SECUNIA

Name: 24188

Hyperlink:http://secunia.com/advisories/24188

External Source: SECUNIA

Name: 24151

Hyperlink:http://secunia.com/advisories/24151

External Source: SECUNIA

Name: 24145

Hyperlink:http://secunia.com/advisories/24145

External Source: SECUNIA

Name: 24140

Hyperlink:http://secunia.com/advisories/24140

External Source: SECUNIA

Name: 24101

Hyperlink:http://secunia.com/advisories/24101

External Source: SECUNIA

Name: 24076

Hyperlink:http://secunia.com/advisories/24076

External Source: SECUNIA

Name: 24067

Hyperlink:http://secunia.com/advisories/24067

External Source: SECUNIA

Name: 24060

Hyperlink:http://secunia.com/advisories/24060

External Source: SECUNIA

Name: 24046

Hyperlink:http://secunia.com/advisories/24046

External Source: SECUNIA

Name: 24030

Hyperlink:http://secunia.com/advisories/24030

External Source: SECUNIA

Name: 24021

Hyperlink:http://secunia.com/advisories/24021

External Source: SUSE

Name: SUSE-SA:2007:016

Hyperlink:http://lists.suse.com/archive/suse-security-announce/2007-Feb/0002.html

External Source: FEDORA

Name: FEDORA-2007-220

Hyperlink:http://fedoranews.org/cms/node/2580

External Source: FEDORA

Name: FEDORA-2007-219

Hyperlink:http://fedoranews.org/cms/node/2579

External Source: SGI

Name: 20070201-01-P

Hyperlink:ftp://patches.sgi.com/support/free/security/advisories/20070201-01-P.asc

References to Check Content

Identifier:oval:org.mitre.oval:def:9758

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:9758