|
|
 |
| Samba Printer Change Notification Request Denial of Service Vulnerability |
| | Secunia Advisory: | SA12397 |  | | Release Date: | 2004-08-30 | | Last Update: | 2004-09-10 |
| | Critical: | 
Not critical | | Impact: | DoS
| | Where: | From local network
| | Solution Status: | Vendor Patch |
| | Software: | Samba 2.x
| | Select a product and view a complete list of all Patched/Unpatched Secunia advisories affecting it. |
| Description:
NOTE: Based on new information from the vendor, this is NOT a security issue and the advisory has therefore been revoked.
A vulnerability has been reported in Samba, which can be exploited by malicious people to cause a DoS (Denial of Service).
The vulnerability is caused due to an error within the handling of client printer change notification requests. This can be exploited to crash smbd by sending a "FindNextPrintChangeNotify()" request without first sending a "FindFirstPrintChangeNotify()" request.
The issue can reportedly be triggered by Windows XP SP2 clients.
Solution:
Update to version 2.2.11.
http://www.samba.org/
Provided and/or discovered by:
Reported by vendor.
Changelog:
2004-09-10: New information from the Samba team states that this can only be exploited by clients to crash their own connection. This is therefore NOT a security issue.
Original Advisory:
http://us1.samba.org/samba/history/samba-2.2.11.html
|
| Please note: The information, which this Secunia Advisory is based upon, comes from third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others. |
|
|
| | Send Feedback to Secunia: |
| If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.
Ideas, suggestions, and other feedback is most welcome. |
|
|
| | Found: 4 Related Secunia Security Advisories |
| | - Samba Security Descriptor Parsing Integer Overflow Vulnerability | | - Samba Arbitrary File Access Vulnerability | | - Samba Two Buffer Overflow Vulnerabilities | | - Samba Packet Fragment Re-assembly Buffer Overflow |
| |
|
|
|
|