FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2004-0807

This CVE name corresponds to:

Entered	Topic
2004-09-14	samba3 DoS attack

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2004-0807 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2004-0807
Phase	Assigned(20040825)

Description

Samba 3.0.6 and earlier allows remote attackers to cause a denial of service (infinite loop and memory exhaustion) via certain malformed requests that cause new processes to be spawned and enter an infinite loop.

References

Source	Reference
IDEFENSE	20040913 Samba 3.x SMBD Remote Denial of Service Vulnerability
BUGTRAQ	20040913 Samba 3.0 DoS Vulberabilities (CAN-2004-0807 & CAN-2004-0808)
CONECTIVA	CLA-2004:873
GENTOO	GLSA-200409-16
MANDRAKE	MDKSA-2004:092
REDHAT	RHSA-2004:467
SGI	20041201-01-P
TRUSTIX	2004-0046
BUGTRAQ	20040915 [OpenPKG-SA-2004.040] OpenPKG Security Advisory (samba)
OVAL	oval:org.mitre.oval:def:11141