|
| TC: | 14050 | |
| Description: | A vulnerability has been reported in Samba, which can be exploited by malicious users to cause a DoS (Denial of Service). Under certain conditions, smbd fails to remove requests from the deferred file open queue. This can be exploited to cause a DoS due to heavy resource usage by triggering an infinite loop when renaming a file under special circumstances. The security issue has been fixed in version 3.0.24. | |
| TC Impact: | Gather Info | |
| Service: | NetBios Session |
| Vulnerability Publication: | February 6, 2007 | |
| Advisory Copyright: | Vendor | |
| Summary: | A vulnerability has been reported in Samba, which can be exploited by malicious users to cause a DoS (Denial of Service). | |
| Risk: | Medium | |
| CVSS 2.0 metrics: | Access Vector: Network Access Complexity: Low Authentication: Single Confidentiality Impact: None Integrity Impact: None Availability Impact: Complete | |
| CVSS 2.0 Base Score: | 6.8 |
| Vulnerability Impact: |
Denial of Service Attack |
|---|
| Host Impact: | Denial of Service. | |
| Nature of Remediation: | Update the software. |
| Step required to fix the reported vulnerability: | |
***** Solution type: Upgrade Software ***** Upgrade to Samba version 3.0.24 or newer. See references for more details. |
| CVE Link: |
CVE-2007-0452 |
 |
|---|
| Glossary: |
Denial of Service DoS Samba SMB |
|---|