CVE-2006-3403: Medium severity Samba Samba vulnerability
Published Jul 12, 2006
·Updated
The smdb daemon (smbd/service.c) in Samba 3.0.1 through 3.0.22 allows remote attackers to cause a denial of service (memory consumption) via a large number of share connection requests.
Affected Software
27 affected components
Samba Samba=3.0.19
Samba Samba=3.0.14a
Samba Samba=3.0.3
Samba Samba=3.0.8
Samba Samba=3.0.5
Samba Samba=3.0.6
Samba Samba=3.0.21a
Samba Samba=3.0.20a
Samba Samba=3.0.21b
Samba Samba=3.0.9
Samba Samba=3.0.11
Samba Samba=3.0.7
Samba Samba=3.0.13
Samba Samba=3.0.20b
Samba Samba=3.0.16
Samba Samba=3.0.17
Samba Samba=3.0.21
Samba Samba=3.0.14
Samba Samba=3.0.21c
Samba Samba=3.0.2
Samba Samba=3.0.12
Samba Samba=3.0.18
Samba Samba=3.0.10
Samba Samba=3.0.15
Samba Samba=3.0.4
Samba Samba=3.0.1
Samba Samba=3.0.22
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Jul 12, 2006
CVE Published
07:05 PM
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-3403?
CVE-2006-3403 is considered a denial of service vulnerability that can cause memory consumption on affected Samba versions.
2
How do I fix CVE-2006-3403?
To fix CVE-2006-3403, upgrade to a patched version of Samba that is above 3.0.22.
3
Which Samba versions are affected by CVE-2006-3403?
CVE-2006-3403 affects Samba versions from 3.0.1 to 3.0.22.
4
What type of attack does CVE-2006-3403 facilitate?
CVE-2006-3403 allows remote attackers to exhaust system memory through numerous share connection requests.
5
Is there a known exploit for CVE-2006-3403?
While there may not be a publicly available exploit, the vulnerability does pose a significant risk of denial of service.