CVE - CVE-2011-0719

CVE-ID
CVE-2011-0719	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
Samba 3.x before 3.3.15, 3.4.x before 3.4.12, and 3.5.x before 3.5.7 does not perform range checks for file descriptors before use of the FD_SET macro, which allows remote attackers to cause a denial of service (stack memory corruption, and infinite loop or daemon crash) by opening a large number of files, related to (1) Winbind or (2) smbd.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:1025132 URL:http://www.securitytracker.com/id?1025132 MISC:43482 URL:http://secunia.com/advisories/43482 MISC:43503 URL:http://secunia.com/advisories/43503 MISC:43512 URL:http://secunia.com/advisories/43512 MISC:43517 URL:http://secunia.com/advisories/43517 MISC:43556 URL:http://secunia.com/advisories/43556 MISC:43557 URL:http://secunia.com/advisories/43557 MISC:43843 URL:http://secunia.com/advisories/43843 MISC:46597 URL:http://www.securityfocus.com/bid/46597 MISC:ADV-2011-0517 URL:~~http://www.vupen.com/english/advisories/2011/0517~~ (Obsolete source) MISC:ADV-2011-0518 URL:~~http://www.vupen.com/english/advisories/2011/0518~~ (Obsolete source) MISC:ADV-2011-0519 URL:~~http://www.vupen.com/english/advisories/2011/0519~~ (Obsolete source) MISC:ADV-2011-0520 URL:~~http://www.vupen.com/english/advisories/2011/0520~~ (Obsolete source) MISC:ADV-2011-0522 URL:~~http://www.vupen.com/english/advisories/2011/0522~~ (Obsolete source) MISC:ADV-2011-0541 URL:~~http://www.vupen.com/english/advisories/2011/0541~~ (Obsolete source) MISC:ADV-2011-0702 URL:~~http://www.vupen.com/english/advisories/2011/0702~~ (Obsolete source) MISC:APPLE-SA-2011-06-23-1 URL:http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html MISC:DSA-2175 URL:http://www.debian.org/security/2011/dsa-2175 MISC:FEDORA-2011-3118 URL:http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056241.html MISC:FEDORA-2011-3120 URL:http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056229.html MISC:HPSBUX02657 URL:http://marc.info/?l=bugtraq&m=130835366526620&w=2 MISC:MDVSA-2011:038 URL:~~http://www.mandriva.com/security/advisories?name=MDVSA-2011:038~~ (Obsolete source) MISC:RHSA-2011:0305 URL:http://www.redhat.com/support/errata/RHSA-2011-0305.html MISC:RHSA-2011:0306 URL:http://www.redhat.com/support/errata/RHSA-2011-0306.html MISC:SSA:2011-059-01 URL:http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.593629 MISC:SSRT100460 URL:http://marc.info/?l=bugtraq&m=130835366526620&w=2 MISC:USN-1075-1 URL:http://www.ubuntu.com/usn/USN-1075-1 MISC:http://samba.org/samba/security/CVE-2011-0719.html URL:http://samba.org/samba/security/CVE-2011-0719.html MISC:http://support.apple.com/kb/HT4723 URL:http://support.apple.com/kb/HT4723 MISC:http://www.samba.org/samba/history/samba-3.3.15.html URL:http://www.samba.org/samba/history/samba-3.3.15.html MISC:http://www.samba.org/samba/history/samba-3.4.12.html URL:http://www.samba.org/samba/history/samba-3.4.12.html MISC:http://www.samba.org/samba/history/samba-3.5.7.html URL:http://www.samba.org/samba/history/samba-3.5.7.html MISC:https://bugzilla.redhat.com/show_bug.cgi?id=678328 URL:https://bugzilla.redhat.com/show_bug.cgi?id=678328 MISC:samba-fdset-dos(65724) URL:https://exchange.xforce.ibmcloud.com/vulnerabilities/65724
Assigning CNA
Red Hat, Inc.
Date Record Created
20110131	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20110131)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)