Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2011-0719

Samba 3.x before 3.3.15, 3.4.x before 3.4.12, and 3.5.x before 3.5.7 does not perform range checks for file descriptors before use of the FD_SET macro, which allows remote attackers to cause a denial of service (stack memory corruption, and infinite loop or daemon crash) by opening a large number of files, related to (1) Winbind or (2) smbd.

Published

2011-03-01T23:00:02.973

Last Modified

2025-04-11T00:51:21.963

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 5.0 (MEDIUM)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality Impact: NONE
Integrity Impact: NONE
Availability Impact: PARTIAL

Exploitability Score

10.0

Impact Score

2.9

Weaknesses

Type: Primary
CWE-119

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	samba	samba	3.0.0	Yes
Application	samba	samba	3.0.1	Yes
Application	samba	samba	3.0.2	Yes
Application	samba	samba	3.0.2	Yes
Application	samba	samba	3.0.2a	Yes
Application	samba	samba	3.0.3	Yes
Application	samba	samba	3.0.4	Yes
Application	samba	samba	3.0.4	Yes
Application	samba	samba	3.0.5	Yes
Application	samba	samba	3.0.6	Yes
Application	samba	samba	3.0.7	Yes
Application	samba	samba	3.0.8	Yes
Application	samba	samba	3.0.9	Yes
Application	samba	samba	3.0.10	Yes
Application	samba	samba	3.0.11	Yes
Application	samba	samba	3.0.12	Yes
Application	samba	samba	3.0.13	Yes
Application	samba	samba	3.0.14	Yes
Application	samba	samba	3.0.14	Yes
Application	samba	samba	3.0.14a	Yes
Application	samba	samba	3.0.15	Yes
Application	samba	samba	3.0.16	Yes
Application	samba	samba	3.0.17	Yes
Application	samba	samba	3.0.18	Yes
Application	samba	samba	3.0.19	Yes
Application	samba	samba	3.0.20	Yes
Application	samba	samba	3.0.20	Yes
Application	samba	samba	3.0.20	Yes
Application	samba	samba	3.0.20a	Yes
Application	samba	samba	3.0.20b	Yes
Application	samba	samba	3.0.21	Yes
Application	samba	samba	3.0.21	Yes
Application	samba	samba	3.0.21	Yes
Application	samba	samba	3.0.21	Yes
Application	samba	samba	3.0.21a	Yes
Application	samba	samba	3.0.21b	Yes
Application	samba	samba	3.0.21c	Yes
Application	samba	samba	3.0.22	Yes
Application	samba	samba	3.0.23	Yes
Application	samba	samba	3.0.23	Yes
Application	samba	samba	3.0.23	Yes
Application	samba	samba	3.0.23	Yes
Application	samba	samba	3.0.23	Yes
Application	samba	samba	3.0.23a	Yes
Application	samba	samba	3.0.23b	Yes
Application	samba	samba	3.0.23c	Yes
Application	samba	samba	3.0.23d	Yes
Application	samba	samba	3.0.24	Yes
Application	samba	samba	3.0.25	Yes
Application	samba	samba	3.0.25	Yes
Application	samba	samba	3.0.25	Yes
Application	samba	samba	3.0.25	Yes
Application	samba	samba	3.0.25	Yes
Application	samba	samba	3.0.25	Yes
Application	samba	samba	3.0.25	Yes
Application	samba	samba	3.0.25	Yes
Application	samba	samba	3.0.25	Yes
Application	samba	samba	3.0.25a	Yes
Application	samba	samba	3.0.25b	Yes
Application	samba	samba	3.0.25c	Yes
Application	samba	samba	3.0.26	Yes
Application	samba	samba	3.0.26	Yes
Application	samba	samba	3.0.26a	Yes
Application	samba	samba	3.0.27	Yes
Application	samba	samba	3.0.27	Yes
Application	samba	samba	3.0.28	Yes
Application	samba	samba	3.0.28	Yes
Application	samba	samba	3.0.29	Yes
Application	samba	samba	3.0.30	Yes
Application	samba	samba	3.0.31	Yes
Application	samba	samba	3.0.32	Yes
Application	samba	samba	3.0.33	Yes
Application	samba	samba	3.0.34	Yes
Application	samba	samba	3.0.35	Yes
Application	samba	samba	3.0.36	Yes
Application	samba	samba	3.0.37	Yes
Application	samba	samba	3.1.0	Yes
Application	samba	samba	3.2.0	Yes
Application	samba	samba	3.2.1	Yes
Application	samba	samba	3.2.2	Yes
Application	samba	samba	3.2.3	Yes
Application	samba	samba	3.2.4	Yes
Application	samba	samba	3.2.5	Yes
Application	samba	samba	3.2.6	Yes
Application	samba	samba	3.2.7	Yes
Application	samba	samba	3.2.8	Yes
Application	samba	samba	3.2.9	Yes
Application	samba	samba	3.2.10	Yes
Application	samba	samba	3.2.11	Yes
Application	samba	samba	3.2.12	Yes
Application	samba	samba	3.2.13	Yes
Application	samba	samba	3.2.14	Yes
Application	samba	samba	3.2.15	Yes
Application	samba	samba	3.3.0	Yes
Application	samba	samba	3.3.1	Yes
Application	samba	samba	3.3.2	Yes
Application	samba	samba	3.3.3	Yes
Application	samba	samba	3.3.4	Yes
Application	samba	samba	3.3.5	Yes
Application	samba	samba	3.3.6	Yes
Application	samba	samba	3.3.7	Yes
Application	samba	samba	3.3.8	Yes
Application	samba	samba	3.3.9	Yes
Application	samba	samba	3.3.10	Yes
Application	samba	samba	3.3.11	Yes
Application	samba	samba	3.3.12	Yes
Application	samba	samba	3.3.13	Yes
Application	samba	samba	3.3.14	Yes
Application	samba	samba	3.4.0	Yes
Application	samba	samba	3.4.1	Yes
Application	samba	samba	3.4.2	Yes
Application	samba	samba	3.4.3	Yes
Application	samba	samba	3.4.4	Yes
Application	samba	samba	3.4.5	Yes
Application	samba	samba	3.4.6	Yes
Application	samba	samba	3.4.7	Yes
Application	samba	samba	3.4.8	Yes
Application	samba	samba	3.4.9	Yes
Application	samba	samba	3.4.10	Yes
Application	samba	samba	3.4.11	Yes
Application	samba	samba	3.5.0	Yes
Application	samba	samba	3.5.1	Yes
Application	samba	samba	3.5.2	Yes
Application	samba	samba	3.5.3	Yes
Application	samba	samba	3.5.4	Yes
Application	samba	samba	3.5.5	Yes
Application	samba	samba	3.5.6	Yes

References

http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html ([email protected])
http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056229.html ([email protected])
http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056241.html ([email protected])
http://marc.info/?l=bugtraq&m=130835366526620&w=2 ([email protected])
http://marc.info/?l=bugtraq&m=130835366526620&w=2 ([email protected])
http://samba.org/samba/security/CVE-2011-0719.html Vendor Advisory ([email protected])
http://secunia.com/advisories/43482 Vendor Advisory ([email protected])
http://secunia.com/advisories/43503 Vendor Advisory ([email protected])
http://secunia.com/advisories/43512 Vendor Advisory ([email protected])
http://secunia.com/advisories/43517 Vendor Advisory ([email protected])
http://secunia.com/advisories/43556 Vendor Advisory ([email protected])
http://secunia.com/advisories/43557 Vendor Advisory ([email protected])
http://secunia.com/advisories/43843 Vendor Advisory ([email protected])
http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.593629 ([email protected])
http://support.apple.com/kb/HT4723 ([email protected])
http://www.debian.org/security/2011/dsa-2175 ([email protected])
http://www.mandriva.com/security/advisories?name=MDVSA-2011:038 ([email protected])
http://www.redhat.com/support/errata/RHSA-2011-0305.html Vendor Advisory ([email protected])
http://www.redhat.com/support/errata/RHSA-2011-0306.html Vendor Advisory ([email protected])
http://www.samba.org/samba/history/samba-3.3.15.html ([email protected])
http://www.samba.org/samba/history/samba-3.4.12.html ([email protected])
http://www.samba.org/samba/history/samba-3.5.7.html ([email protected])
http://www.securityfocus.com/bid/46597 ([email protected])
http://www.securitytracker.com/id?1025132 ([email protected])
http://www.ubuntu.com/usn/USN-1075-1 ([email protected])
http://www.vupen.com/english/advisories/2011/0517 Vendor Advisory ([email protected])
http://www.vupen.com/english/advisories/2011/0518 Vendor Advisory ([email protected])
http://www.vupen.com/english/advisories/2011/0519 Vendor Advisory ([email protected])
http://www.vupen.com/english/advisories/2011/0520 Vendor Advisory ([email protected])
http://www.vupen.com/english/advisories/2011/0522 Vendor Advisory ([email protected])
http://www.vupen.com/english/advisories/2011/0541 Vendor Advisory ([email protected])
http://www.vupen.com/english/advisories/2011/0702 Vendor Advisory ([email protected])
https://bugzilla.redhat.com/show_bug.cgi?id=678328 Patch ([email protected])
https://exchange.xforce.ibmcloud.com/vulnerabilities/65724 ([email protected])
http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html (af854a3a-2127-422b-91ae-364da2661108)
http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056229.html (af854a3a-2127-422b-91ae-364da2661108)
http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056241.html (af854a3a-2127-422b-91ae-364da2661108)
http://marc.info/?l=bugtraq&m=130835366526620&w=2 (af854a3a-2127-422b-91ae-364da2661108)
http://marc.info/?l=bugtraq&m=130835366526620&w=2 (af854a3a-2127-422b-91ae-364da2661108)
http://samba.org/samba/security/CVE-2011-0719.html Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/43482 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/43503 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/43512 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/43517 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/43556 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/43557 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/43843 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.593629 (af854a3a-2127-422b-91ae-364da2661108)
http://support.apple.com/kb/HT4723 (af854a3a-2127-422b-91ae-364da2661108)
http://www.debian.org/security/2011/dsa-2175 (af854a3a-2127-422b-91ae-364da2661108)
http://www.mandriva.com/security/advisories?name=MDVSA-2011:038 (af854a3a-2127-422b-91ae-364da2661108)
http://www.redhat.com/support/errata/RHSA-2011-0305.html Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.redhat.com/support/errata/RHSA-2011-0306.html Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.samba.org/samba/history/samba-3.3.15.html (af854a3a-2127-422b-91ae-364da2661108)
http://www.samba.org/samba/history/samba-3.4.12.html (af854a3a-2127-422b-91ae-364da2661108)
http://www.samba.org/samba/history/samba-3.5.7.html (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/46597 (af854a3a-2127-422b-91ae-364da2661108)
http://www.securitytracker.com/id?1025132 (af854a3a-2127-422b-91ae-364da2661108)
http://www.ubuntu.com/usn/USN-1075-1 (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2011/0517 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2011/0518 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2011/0519 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2011/0520 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2011/0522 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2011/0541 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2011/0702 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://bugzilla.redhat.com/show_bug.cgi?id=678328 Patch (af854a3a-2127-422b-91ae-364da2661108)
https://exchange.xforce.ibmcloud.com/vulnerabilities/65724 (af854a3a-2127-422b-91ae-364da2661108)