CVE-2007-0452

Published: Feb 6, 2007Modified: Apr 23, 2026

6.8

Vector

AV:N/AC:L/Au:S/C:N/I:N/A:C

Exploitability: 8.0 / Impact: 6.9

Source: NVD

Description

smbd in Samba 3.0.6 through 3.0.23d allows remote authenticated users to cause a denial of service (memory and CPU exhaustion) by renaming a file in a way that prevents a request from being removed from the deferred open queue, which triggers an infinite loop.

Affected (22)

Products: Samba: Samba

Samba

1 product

Samba

Configuration A

22 vulnerable

Vulnerable Software	Affected Versions
Samba Samba	Version 3.0.10
Samba Samba	Version 3.0.11
Samba Samba	Version 3.0.12
Samba Samba	Version 3.0.13
Samba Samba	Version 3.0.14a
Samba Samba	Version 3.0.20
Samba Samba	Version 3.0.20a
Samba Samba	Version 3.0.20b
Samba Samba	Version 3.0.21
Samba Samba	Version 3.0.21a
Samba Samba	Version 3.0.21b
Samba Samba	Version 3.0.21c
Samba Samba	Version 3.0.22
Samba Samba	Version 3.0.23
Samba Samba	Version 3.0.23a
Samba Samba	Version 3.0.23b
Samba Samba	Version 3.0.23c
Samba Samba	Version 3.0.23d
Samba Samba	Version 3.0.6
Samba Samba	Version 3.0.7
Samba Samba	Version 3.0.8
Samba Samba	Version 3.0.9

References (78)

ftp://patches.sgi.com/support/free/security/advisories/20070201-01-P.asc (unsafe URL)

Source: secalert@redhat.com

http://fedoranews.org/cms/node/2579

Source: secalert@redhat.com

http://fedoranews.org/cms/node/2580

Source: secalert@redhat.com

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00943462

Source: secalert@redhat.com

http://lists.suse.com/archive/suse-security-announce/2007-Feb/0002.html

Source: secalert@redhat.com

http://osvdb.org/33100

Source: secalert@redhat.com

http://secunia.com/advisories/24021

Source: secalert@redhat.com

http://secunia.com/advisories/24030

Source: secalert@redhat.com

http://secunia.com/advisories/24046

Source: secalert@redhat.com

http://secunia.com/advisories/24060

Source: secalert@redhat.com

http://secunia.com/advisories/24067

Source: secalert@redhat.com

http://secunia.com/advisories/24076

Source: secalert@redhat.com

http://secunia.com/advisories/24101

Source: secalert@redhat.com

http://secunia.com/advisories/24140

Source: secalert@redhat.com

http://secunia.com/advisories/24145

Source: secalert@redhat.com

http://secunia.com/advisories/24151

Source: secalert@redhat.com

http://secunia.com/advisories/24188

Source: secalert@redhat.com

http://secunia.com/advisories/24284

Source: secalert@redhat.com

http://secunia.com/advisories/24792

Source: secalert@redhat.com

http://securityreason.com/securityalert/2219

Source: secalert@redhat.com

http://securitytracker.com/id?1017587

Source: secalert@redhat.com

http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.476916

Source: secalert@redhat.com

http://sunsolve.sun.com/search/document.do?assetkey=1-66-200588-1

Source: secalert@redhat.com

http://us1.samba.org/samba/security/CVE-2007-0452.html

Source: secalert@redhat.com

http://www.debian.org/security/2007/dsa-1257

Source: secalert@redhat.com

http://www.gentoo.org/security/en/glsa/glsa-200702-01.xml

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDKSA-2007:034

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2007-0060.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2007-0061.html

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/459167/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/459365/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/bid/22395

Source: secalert@redhat.com

http://www.trustix.org/errata/2007/0007

Source: secalert@redhat.com

http://www.ubuntu.com/usn/usn-419-1

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2007/0483

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2007/1278

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/32301

Source: secalert@redhat.com

https://issues.rpath.com/browse/RPL-1005

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9758

Source: secalert@redhat.com

ftp://patches.sgi.com/support/free/security/advisories/20070201-01-P.asc (unsafe URL)