CVE-2006-3403

Published: Jul 12, 2006Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The smdb daemon (smbd/service.c) in Samba 3.0.1 through 3.0.22 allows remote attackers to cause a denial of service (memory consumption) via a large number of share connection requests.

Affected (27)

Products: Samba: Samba

Samba

1 product

Samba

Configuration A

27 vulnerable

Vulnerable Software	Affected Versions
Samba Samba	Version 3.0.10
Samba Samba	Version 3.0.11
Samba Samba	Version 3.0.12
Samba Samba	Version 3.0.13
Samba Samba	Version 3.0.14
Samba Samba	Version 3.0.14a
Samba Samba	Version 3.0.15
Samba Samba	Version 3.0.16
Samba Samba	Version 3.0.17
Samba Samba	Version 3.0.18
Samba Samba	Version 3.0.19
Samba Samba	Version 3.0.1
Samba Samba	Version 3.0.20a
Samba Samba	Version 3.0.20b
Samba Samba	Version 3.0.21
Samba Samba	Version 3.0.21a
Samba Samba	Version 3.0.21b
Samba Samba	Version 3.0.21c
Samba Samba	Version 3.0.22
Samba Samba	Version 3.0.2
Samba Samba	Version 3.0.3
Samba Samba	Version 3.0.4
Samba Samba	Version 3.0.5
Samba Samba	Version 3.0.6
Samba Samba	Version 3.0.7
Samba Samba	Version 3.0.8
Samba Samba	Version 3.0.9

References (90)

ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc (unsafe URL)

Source: cve@mitre.org

http://docs.info.apple.com/article.html?artnum=304829

Source: cve@mitre.org

http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html

Source: cve@mitre.org

http://secunia.com/advisories/20980

Source: cve@mitre.org

PatchVendor Advisory

http://secunia.com/advisories/20983

Source: cve@mitre.org

PatchVendor Advisory

http://secunia.com/advisories/21018

Source: cve@mitre.org

http://secunia.com/advisories/21019

Source: cve@mitre.org

http://secunia.com/advisories/21046

Source: cve@mitre.org

http://secunia.com/advisories/21086

Source: cve@mitre.org

http://secunia.com/advisories/21143

Source: cve@mitre.org

http://secunia.com/advisories/21159

Source: cve@mitre.org

http://secunia.com/advisories/21187

Source: cve@mitre.org

http://secunia.com/advisories/21190

Source: cve@mitre.org

http://secunia.com/advisories/21262

Source: cve@mitre.org

http://secunia.com/advisories/22875

Source: cve@mitre.org

http://secunia.com/advisories/23155

Source: cve@mitre.org

http://security.gentoo.org/glsa/glsa-200607-10.xml

Source: cve@mitre.org

http://securitydot.net/xpl/exploits/vulnerabilities/articles/1175/exploit.html

Source: cve@mitre.org

http://securitytracker.com/id?1016459

Source: cve@mitre.org

http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.416876

Source: cve@mitre.org

http://www.debian.org/security/2006/dsa-1110

Source: cve@mitre.org

http://www.kb.cert.org/vuls/id/313836

Source: cve@mitre.org

US Government Resource

http://www.mandriva.com/security/advisories?name=MDKSA-2006:120

Source: cve@mitre.org

http://www.novell.com/linux/security/advisories/2006_17_sr.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2006-0591.html

Source: cve@mitre.org

http://www.samba.org/samba/security/CAN-2006-3403.html

Source: cve@mitre.org

Patch

http://www.securityfocus.com/archive/1/439757/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/439875/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/439880/100/100/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/440767/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/440836/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/448957/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/451404/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/451417/100/200/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/451426/100/200/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/18927

Source: cve@mitre.org

Patch

http://www.ubuntu.com/usn/usn-314-1

Source: cve@mitre.org

http://www.us-cert.gov/cas/techalerts/TA06-333A.html

Source: cve@mitre.org

US Government Resource

http://www.vmware.com/download/esx/esx-202-200610-patch.html

Source: cve@mitre.org

http://www.vmware.com/download/esx/esx-213-200610-patch.html

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/2745

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/4502

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/4750

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/27648

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11355

Source: cve@mitre.org

ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc (unsafe URL)