NetSight
medium4.0

CVE-2009-2906

smbd in Samba 3.0 before 3.0.37, 3.2 before 3.2.15, 3.3 before 3.3.8, and 3.4 before 3.4.2 allows remote authenticated users to cause a denial of service (infi…

Impact

smbd in Samba 3.0 before 3.0.37, 3.2 before 3.2.15, 3.3 before 3.3.8, and 3.4 before 3.4.2 allows remote authenticated users to cause a denial of service (infinite loop) via an unanticipated oplock break notification reply packet.

Affected products

VendorProductAffected versions
SambaSamba
before 3.0.37
from 3.2.0 before 3.2.15
from 3.3.0 before 3.3.8
Versions 3.4.0, 3.4.1
CanonicalUbuntu Linux
Versions 6.06, 8.04, 8.10, 9.04

Weakness classification

References