diff options
| author | nectar <nectar@FreeBSD.org> | 2004-11-12 23:01:57 +0800 |
|---|---|---|
| committer | nectar <nectar@FreeBSD.org> | 2004-11-12 23:01:57 +0800 |
| commit | 05587fb1a183f1667efdd6857dee5bba1a71aaca (patch) | |
| tree | 0606745155250c9628064c5ff3de62dd6cfa1caf | |
| parent | eb74d30f8397e2091a885e261859565fc0d358f6 (diff) | |
| download | freebsd-ports-gnome-05587fb1a183f1667efdd6857dee5bba1a71aaca.tar.gz freebsd-ports-gnome-05587fb1a183f1667efdd6857dee5bba1a71aaca.tar.zst freebsd-ports-gnome-05587fb1a183f1667efdd6857dee5bba1a71aaca.zip | |
Note (likely) remotely exploitable vulnerability in samba 3.
Submitted by: Shane Kinney <mod6@freebsdhackers.net>
| -rw-r--r-- | security/vuxml/vuln.xml | 33 |
1 files changed, 33 insertions, 0 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index 9664a1e99c95..92179349ba2d 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -32,6 +32,39 @@ EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. --> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1"> + <vuln vid="ba13dc13-340d-11d9-ac1b-000d614f7fad"> + <topic>samba -- potential remote DoS vulnerability</topic> + <affects> + <package> + <name>samba</name> + <range><ge>3</ge><lt>3.0.8,1</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>Karol Wiesek at iDEFENSE reports:</p> + <blockquote cite="http://us4.samba.org/samba/security/CAN-2004-0930.html"> + <p>A remote attacker could cause an smbd process to consume + abnormal amounts of system resources due to an input + validation error when matching filenames containing + wildcard characters.</p> + </blockquote> + <p>Although samba.org classifies this as a DoS vulnerability, + several members of the security community believe it may be + exploitable for arbitrary code execution.</p> + </body> + </description> + <references> + <freebsdpr>ports/73701</freebsdpr> + <cvename>CAN-2004-0930</cvename> + <url>http://us4.samba.org/samba/security/CAN-2004-0930.html</url> + </references> + <dates> + <discovery>2004-09-30</discovery> + <entry>2004-11-12</entry> + </dates> + </vuln> + <vuln vid="fc99c736-3499-11d9-98a7-0090962cff2a"> <topic>gnats4 -- format string vulnerability</topic> <affects> |