CVE-2011-0719

Samba 3.x before 3.3.15, 3.4.x before 3.4.12, and 3.5.x before 3.5.7 does not perform range checks for file descriptors before use of the FD_SET macro, which allows remote attackers to cause a denial of service (stack memory corruption, and infinite loop or daemon crash) by opening a large number of files, related to (1) Winbind or (2) smbd.
References
Link Resource
http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html
http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056229.html
http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056241.html
http://marc.info/?l=bugtraq&m=130835366526620&w=2
http://marc.info/?l=bugtraq&m=130835366526620&w=2
http://samba.org/samba/security/CVE-2011-0719.html Vendor Advisory
http://secunia.com/advisories/43482 Vendor Advisory
http://secunia.com/advisories/43503 Vendor Advisory
http://secunia.com/advisories/43512 Vendor Advisory
http://secunia.com/advisories/43517 Vendor Advisory
http://secunia.com/advisories/43556 Vendor Advisory
http://secunia.com/advisories/43557 Vendor Advisory
http://secunia.com/advisories/43843 Vendor Advisory
http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.593629
http://support.apple.com/kb/HT4723
http://www.debian.org/security/2011/dsa-2175
http://www.mandriva.com/security/advisories?name=MDVSA-2011:038
http://www.redhat.com/support/errata/RHSA-2011-0305.html Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2011-0306.html Vendor Advisory
http://www.samba.org/samba/history/samba-3.3.15.html
http://www.samba.org/samba/history/samba-3.4.12.html
http://www.samba.org/samba/history/samba-3.5.7.html
http://www.securityfocus.com/bid/46597
http://www.securitytracker.com/id?1025132
http://www.ubuntu.com/usn/USN-1075-1
http://www.vupen.com/english/advisories/2011/0517 Vendor Advisory
http://www.vupen.com/english/advisories/2011/0518 Vendor Advisory
http://www.vupen.com/english/advisories/2011/0519 Vendor Advisory
http://www.vupen.com/english/advisories/2011/0520 Vendor Advisory
http://www.vupen.com/english/advisories/2011/0522 Vendor Advisory
http://www.vupen.com/english/advisories/2011/0541 Vendor Advisory
http://www.vupen.com/english/advisories/2011/0702 Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=678328 Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/65724
http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html
http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056229.html
http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056241.html
http://marc.info/?l=bugtraq&m=130835366526620&w=2
http://marc.info/?l=bugtraq&m=130835366526620&w=2
http://samba.org/samba/security/CVE-2011-0719.html Vendor Advisory
http://secunia.com/advisories/43482 Vendor Advisory
http://secunia.com/advisories/43503 Vendor Advisory
http://secunia.com/advisories/43512 Vendor Advisory
http://secunia.com/advisories/43517 Vendor Advisory
http://secunia.com/advisories/43556 Vendor Advisory
http://secunia.com/advisories/43557 Vendor Advisory
http://secunia.com/advisories/43843 Vendor Advisory
http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.593629
http://support.apple.com/kb/HT4723
http://www.debian.org/security/2011/dsa-2175
http://www.mandriva.com/security/advisories?name=MDVSA-2011:038
http://www.redhat.com/support/errata/RHSA-2011-0305.html Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2011-0306.html Vendor Advisory
http://www.samba.org/samba/history/samba-3.3.15.html
http://www.samba.org/samba/history/samba-3.4.12.html
http://www.samba.org/samba/history/samba-3.5.7.html
http://www.securityfocus.com/bid/46597
http://www.securitytracker.com/id?1025132
http://www.ubuntu.com/usn/USN-1075-1
http://www.vupen.com/english/advisories/2011/0517 Vendor Advisory
http://www.vupen.com/english/advisories/2011/0518 Vendor Advisory
http://www.vupen.com/english/advisories/2011/0519 Vendor Advisory
http://www.vupen.com/english/advisories/2011/0520 Vendor Advisory
http://www.vupen.com/english/advisories/2011/0522 Vendor Advisory
http://www.vupen.com/english/advisories/2011/0541 Vendor Advisory
http://www.vupen.com/english/advisories/2011/0702 Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=678328 Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/65724
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:samba:samba:3.0.0:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.1:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.2:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.2:a:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.2a:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.3:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.4:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.4:rc1:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.5:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.6:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.7:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.8:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.9:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.10:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.11:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.12:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.13:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.14:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.14:a:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.14a:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.15:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.16:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.17:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.18:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.19:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.20:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.20:a:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.20:b:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.20a:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.20b:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.21:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.21:a:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.21:b:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.21:c:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.21a:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.21b:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.21c:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.22:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.23:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.23:a:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.23:b:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.23:c:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.23:d:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.23a:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.23b:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.23c:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.23d:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.24:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.25:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.25:a:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.25:b:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.25:c:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.25:pre1:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.25:pre2:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.25:rc1:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.25:rc2:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.25:rc3:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.25a:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.25b:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.25c:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.26:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.26:a:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.26a:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.27:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.27:a:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.28:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.28:a:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.29:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.30:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.31:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.32:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.33:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.34:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.35:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.36:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.37:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.1.0:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.2.0:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.2.1:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.2.2:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.2.3:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.2.4:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.2.5:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.2.6:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.2.7:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.2.8:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.2.9:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.2.10:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.2.11:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.2.12:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.2.13:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.2.14:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.2.15:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.3.0:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.3.1:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.3.2:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.3.3:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.3.4:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.3.5:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.3.6:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.3.7:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.3.8:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.3.9:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.3.10:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.3.11:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.3.12:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.3.13:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.3.14:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:a:samba:samba:3.4.0:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.4.1:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.4.2:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.4.3:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.4.4:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.4.5:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.4.6:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.4.7:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.4.8:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.4.9:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.4.10:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.4.11:*:*:*:*:*:*:*

Configuration 3 (hide)

OR cpe:2.3:a:samba:samba:3.5.0:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.5.1:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.5.2:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.5.3:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.5.4:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.5.5:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.5.6:*:*:*:*:*:*:*

History

21 Nov 2024, 01:24

Type Values Removed Values Added
References () http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html - () http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html -
References () http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056229.html - () http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056229.html -
References () http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056241.html - () http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056241.html -
References () http://marc.info/?l=bugtraq&m=130835366526620&w=2 - () http://marc.info/?l=bugtraq&m=130835366526620&w=2 -
References () http://samba.org/samba/security/CVE-2011-0719.html - Vendor Advisory () http://samba.org/samba/security/CVE-2011-0719.html - Vendor Advisory
References () http://secunia.com/advisories/43482 - Vendor Advisory () http://secunia.com/advisories/43482 - Vendor Advisory
References () http://secunia.com/advisories/43503 - Vendor Advisory () http://secunia.com/advisories/43503 - Vendor Advisory
References () http://secunia.com/advisories/43512 - Vendor Advisory () http://secunia.com/advisories/43512 - Vendor Advisory
References () http://secunia.com/advisories/43517 - Vendor Advisory () http://secunia.com/advisories/43517 - Vendor Advisory
References () http://secunia.com/advisories/43556 - Vendor Advisory () http://secunia.com/advisories/43556 - Vendor Advisory
References () http://secunia.com/advisories/43557 - Vendor Advisory () http://secunia.com/advisories/43557 - Vendor Advisory
References () http://secunia.com/advisories/43843 - Vendor Advisory () http://secunia.com/advisories/43843 - Vendor Advisory
References () http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.593629 - () http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.593629 -
References () http://support.apple.com/kb/HT4723 - () http://support.apple.com/kb/HT4723 -
References () http://www.debian.org/security/2011/dsa-2175 - () http://www.debian.org/security/2011/dsa-2175 -
References () http://www.mandriva.com/security/advisories?name=MDVSA-2011:038 - () http://www.mandriva.com/security/advisories?name=MDVSA-2011:038 -
References () http://www.redhat.com/support/errata/RHSA-2011-0305.html - Vendor Advisory () http://www.redhat.com/support/errata/RHSA-2011-0305.html - Vendor Advisory
References () http://www.redhat.com/support/errata/RHSA-2011-0306.html - Vendor Advisory () http://www.redhat.com/support/errata/RHSA-2011-0306.html - Vendor Advisory
References () http://www.samba.org/samba/history/samba-3.3.15.html - () http://www.samba.org/samba/history/samba-3.3.15.html -
References () http://www.samba.org/samba/history/samba-3.4.12.html - () http://www.samba.org/samba/history/samba-3.4.12.html -
References () http://www.samba.org/samba/history/samba-3.5.7.html - () http://www.samba.org/samba/history/samba-3.5.7.html -
References () http://www.securityfocus.com/bid/46597 - () http://www.securityfocus.com/bid/46597 -
References () http://www.securitytracker.com/id?1025132 - () http://www.securitytracker.com/id?1025132 -
References () http://www.ubuntu.com/usn/USN-1075-1 - () http://www.ubuntu.com/usn/USN-1075-1 -
References () http://www.vupen.com/english/advisories/2011/0517 - Vendor Advisory () http://www.vupen.com/english/advisories/2011/0517 - Vendor Advisory
References () http://www.vupen.com/english/advisories/2011/0518 - Vendor Advisory () http://www.vupen.com/english/advisories/2011/0518 - Vendor Advisory
References () http://www.vupen.com/english/advisories/2011/0519 - Vendor Advisory () http://www.vupen.com/english/advisories/2011/0519 - Vendor Advisory
References () http://www.vupen.com/english/advisories/2011/0520 - Vendor Advisory () http://www.vupen.com/english/advisories/2011/0520 - Vendor Advisory
References () http://www.vupen.com/english/advisories/2011/0522 - Vendor Advisory () http://www.vupen.com/english/advisories/2011/0522 - Vendor Advisory
References () http://www.vupen.com/english/advisories/2011/0541 - Vendor Advisory () http://www.vupen.com/english/advisories/2011/0541 - Vendor Advisory
References () http://www.vupen.com/english/advisories/2011/0702 - Vendor Advisory () http://www.vupen.com/english/advisories/2011/0702 - Vendor Advisory
References () https://bugzilla.redhat.com/show_bug.cgi?id=678328 - Patch () https://bugzilla.redhat.com/show_bug.cgi?id=678328 - Patch
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/65724 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/65724 -

Information

Published : 2011-03-01 23:00

Updated : 2024-11-21 01:24


NVD link : CVE-2011-0719

Mitre link : CVE-2011-0719

CVE.ORG link : CVE-2011-0719


JSON object : View

Products Affected

samba

  • samba
CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer