CVE-2011-0719

Published: Mar 1, 2011Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Samba 3.x before 3.3.15, 3.4.x before 3.4.12, and 3.5.x before 3.5.7 does not perform range checks for file descriptors before use of the FD_SET macro, which allows remote attackers to cause a denial of service (stack memory corruption, and infinite loop or daemon crash) by opening a large number of files, related to (1) Winbind or (2) smbd.

Affected (127)

Products: Samba: Samba

Samba

1 product

Samba

Configuration A

108 vulnerable

Vulnerable Software	Affected Versions
Samba Samba	Version 3.0.0
Samba Samba	Version 3.0.10
Samba Samba	Version 3.0.11
Samba Samba	Version 3.0.12
Samba Samba	Version 3.0.13
Samba Samba	Version 3.0.14
Samba Samba	Version 3.0.14 a
Samba Samba	Version 3.0.14a
Samba Samba	Version 3.0.15
Samba Samba	Version 3.0.16
Samba Samba	Version 3.0.17
Samba Samba	Version 3.0.18
Samba Samba	Version 3.0.19
Samba Samba	Version 3.0.1
Samba Samba	Version 3.0.20
Samba Samba	Version 3.0.20 a
Samba Samba	Version 3.0.20 b
Samba Samba	Version 3.0.20a
Samba Samba	Version 3.0.20b
Samba Samba	Version 3.0.21
Samba Samba	Version 3.0.21 a
Samba Samba	Version 3.0.21 b
Samba Samba	Version 3.0.21 c
Samba Samba	Version 3.0.21a
Samba Samba	Version 3.0.21b
Samba Samba	Version 3.0.21c
Samba Samba	Version 3.0.22
Samba Samba	Version 3.0.23
Samba Samba	Version 3.0.23 a
Samba Samba	Version 3.0.23 b
Samba Samba	Version 3.0.23 c
Samba Samba	Version 3.0.23 d
Samba Samba	Version 3.0.23a
Samba Samba	Version 3.0.23b
Samba Samba	Version 3.0.23c
Samba Samba	Version 3.0.23d
Samba Samba	Version 3.0.24
Samba Samba	Version 3.0.25
Samba Samba	Version 3.0.25 a
Samba Samba	Version 3.0.25 b
Samba Samba	Version 3.0.25 c
Samba Samba	Version 3.0.25 pre1
Samba Samba	Version 3.0.25 pre2
Samba Samba	Version 3.0.25 rc1
Samba Samba	Version 3.0.25 rc2
Samba Samba	Version 3.0.25 rc3
Samba Samba	Version 3.0.25a
Samba Samba	Version 3.0.25b
Samba Samba	Version 3.0.25c
Samba Samba	Version 3.0.26
Samba Samba	Version 3.0.26 a
Samba Samba	Version 3.0.26a
Samba Samba	Version 3.0.27
Samba Samba	Version 3.0.27 a
Samba Samba	Version 3.0.28
Samba Samba	Version 3.0.28 a
Samba Samba	Version 3.0.29
Samba Samba	Version 3.0.2
Samba Samba	Version 3.0.2 a
Samba Samba	Version 3.0.2a
Samba Samba	Version 3.0.30
Samba Samba	Version 3.0.31
Samba Samba	Version 3.0.32
Samba Samba	Version 3.0.33
Samba Samba	Version 3.0.34
Samba Samba	Version 3.0.35
Samba Samba	Version 3.0.36
Samba Samba	Version 3.0.37
Samba Samba	Version 3.0.3
Samba Samba	Version 3.0.4
Samba Samba	Version 3.0.4 rc1
Samba Samba	Version 3.0.5
Samba Samba	Version 3.0.6
Samba Samba	Version 3.0.7
Samba Samba	Version 3.0.8
Samba Samba	Version 3.0.9
Samba Samba	Version 3.1.0
Samba Samba	Version 3.2.0
Samba Samba	Version 3.2.10
Samba Samba	Version 3.2.11
Samba Samba	Version 3.2.12
Samba Samba	Version 3.2.13
Samba Samba	Version 3.2.14
Samba Samba	Version 3.2.15
Samba Samba	Version 3.2.1
Samba Samba	Version 3.2.2
Samba Samba	Version 3.2.3
Samba Samba	Version 3.2.4
Samba Samba	Version 3.2.5
Samba Samba	Version 3.2.6
Samba Samba	Version 3.2.7
Samba Samba	Version 3.2.8
Samba Samba	Version 3.2.9
Samba Samba	Version 3.3.0
Samba Samba	Version 3.3.10
Samba Samba	Version 3.3.11
Samba Samba	Version 3.3.12
Samba Samba	Version 3.3.13
Samba Samba	Version 3.3.14
Samba Samba	Version 3.3.1
Samba Samba	Version 3.3.2
Samba Samba	Version 3.3.3
Samba Samba	Version 3.3.4
Samba Samba	Version 3.3.5
Samba Samba	Version 3.3.6
Samba Samba	Version 3.3.7
Samba Samba	Version 3.3.8
Samba Samba	Version 3.3.9

Configuration B

12 vulnerable

Vulnerable Software	Affected Versions
Samba Samba	Version 3.4.0
Samba Samba	Version 3.4.10
Samba Samba	Version 3.4.11
Samba Samba	Version 3.4.1
Samba Samba	Version 3.4.2
Samba Samba	Version 3.4.3
Samba Samba	Version 3.4.4
Samba Samba	Version 3.4.5
Samba Samba	Version 3.4.6
Samba Samba	Version 3.4.7
Samba Samba	Version 3.4.8
Samba Samba	Version 3.4.9

Configuration C

7 vulnerable

Vulnerable Software	Affected Versions
Samba Samba	Version 3.5.0
Samba Samba	Version 3.5.1
Samba Samba	Version 3.5.2
Samba Samba	Version 3.5.3
Samba Samba	Version 3.5.4
Samba Samba	Version 3.5.5
Samba Samba	Version 3.5.6

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (66)

http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056229.html

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056241.html

Source: secalert@redhat.com

http://marc.info/?l=bugtraq&m=130835366526620&w=2

Source: secalert@redhat.com

http://samba.org/samba/security/CVE-2011-0719.html

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/43482

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/43503

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/43512

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/43517

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/43556

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/43557

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/43843

Source: secalert@redhat.com

Vendor Advisory

http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.593629

Source: secalert@redhat.com

http://support.apple.com/kb/HT4723

Source: secalert@redhat.com

http://www.debian.org/security/2011/dsa-2175

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDVSA-2011:038

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2011-0305.html

Source: secalert@redhat.com

Vendor Advisory

http://www.redhat.com/support/errata/RHSA-2011-0306.html

Source: secalert@redhat.com

Vendor Advisory

http://www.samba.org/samba/history/samba-3.3.15.html

Source: secalert@redhat.com

http://www.samba.org/samba/history/samba-3.4.12.html

Source: secalert@redhat.com

http://www.samba.org/samba/history/samba-3.5.7.html

Source: secalert@redhat.com

http://www.securityfocus.com/bid/46597

Source: secalert@redhat.com

http://www.securitytracker.com/id?1025132

Source: secalert@redhat.com

http://www.ubuntu.com/usn/USN-1075-1

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2011/0517

Source: secalert@redhat.com

Vendor Advisory

http://www.vupen.com/english/advisories/2011/0518

Source: secalert@redhat.com

Vendor Advisory

http://www.vupen.com/english/advisories/2011/0519

Source: secalert@redhat.com

Vendor Advisory

http://www.vupen.com/english/advisories/2011/0520

Source: secalert@redhat.com

Vendor Advisory

http://www.vupen.com/english/advisories/2011/0522

Source: secalert@redhat.com

Vendor Advisory

http://www.vupen.com/english/advisories/2011/0541

Source: secalert@redhat.com

Vendor Advisory

http://www.vupen.com/english/advisories/2011/0702

Source: secalert@redhat.com

Vendor Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=678328

Source: secalert@redhat.com

Patch

https://exchange.xforce.ibmcloud.com/vulnerabilities/65724

Source: secalert@redhat.com

http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html