PT-2011-1136 · Samba+3 · Samba+3

Volker Lendecke · Published 2011-03-01 · Updated 2024-06-15 · CVE-2011-0719

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Samba versions prior to 3.3.15 Samba versions prior to 3.4.12 Samba versions prior to 3.5.7

Description The issue allows remote attackers to cause a denial of service, potentially leading to disruption of protected information. This can be achieved by opening a large number of files, which may result in stack memory corruption, an infinite loop, or daemon crash. The exploitation can be related to Winbind or smbd.

Recommendations For Samba versions prior to 3.3.15, update to version 3.3.15 or later. For Samba versions prior to 3.4.12, update to version 3.4.12 or later. For Samba versions prior to 3.5.7, update to version 3.5.7 or later.

Exploit

Fix

DoS

Infinite Loop

Buffer Overflow

Weakness Enumeration

CWE-835

CWE-119

Related Identifiers

BDU:2015-07088

BDU:2015-07089

BDU:2015-07090

BDU:2015-07091

BDU:2015-07092

BDU:2015-07093

BDU:2015-07094

BDU:2015-07095

BDU:2015-08697

BDU:2015-08698

BDU:2015-08699

BDU:2015-08700

BDU:2015-08701

BDU:2015-08702

BDU:2015-08703

BDU:2015-08704

BDU:2015-09648

CVE-2011-0719

DSA-2175-1

ECHO-7FB9-499C-305C

HPSBUX02657

OPENSUSE-SU-2024:10069-1

RHSA-2011:0305

RHSA-2011:0306

RHSA-2011_0305

RHSA-2011_0306

Affected Products

Hp-Ux

Red Hat

Samba

Suse

References · 117

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/samba/chain_reply.rb · Exploit
• https://bdu.fstec.ru/vul/2015-07092 · Security Note
• http://vupen.com/english/advisories/2011/0518 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10069-1 · Vendor Advisory
• http://secunia.com/advisories/43512 · Vendor Advisory
• http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.593629 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-08703 · Security Note
• http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056241.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2011-0719 · Vendor Advisory
• http://secunia.com/advisories/43843 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-07091 · Security Note
• http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056229.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-08700 · Security Note
• http://vupen.com/english/advisories/2011/0519 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-0719 · Security Note