Gentoo Security Advisory GLSA 200607-10 (samba)

The remote host is missing updates announced in
advisory GLSA 200607-10.

A large number of share connection requests could cause a Denial of Service
within Samba.

Solution:
All Samba users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose '>=net-fs/samba-3.0.22-r3'

http://www.securityspace.com/smysecure/catid.html?in=GLSA%20200607-10
http://bugs.gentoo.org/show_bug.cgi?id=139369

Risk factor : Medium
Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2006-3403
Bugtraq: 20060710 Re: [ANNOUNCEMENT] Samba 3.0.1 - 3.0.22: memory exhaustion DoS against smbd (Google Search)
http://www.securityfocus.com/archive/1/archive/1/439875/100/0/threaded
Bugtraq: 20060710 [ANNOUNCEMENT] Samba 3.0.1 - 3.0.22: memory exhaustion DoS against smbd (Google Search)
http://www.securityfocus.com/archive/1/archive/1/439757/100/0/threaded
Bugtraq: 20060711 rPSA-2006-0128-1 samba samba-swat (Google Search)
http://www.securityfocus.com/archive/1/archive/1/439880/100/100/threaded
Bugtraq: 20060720 Samba Internal Data Structures DOS Vulnerability Exploit (Google Search)
http://www.securityfocus.com/archive/1/archive/1/440767/100/0/threaded
Debian Security Information: DSA-1110 (Google Search)
http://www.debian.org/security/2006/dsa-1110
http://security.gentoo.org/glsa/glsa-200607-10.xml
HPdes Security Advisory: HPSBUX02155
http://www.securityfocus.com/archive/1/archive/1/448957/100/0/threaded
HPdes Security Advisory: SSRT061235
http://frontal2.mandriva.com/security/advisories?name=MDKSA-2006:120
http://www.redhat.com/support/errata/RHSA-2006-0591.html
SGI Security Advisory: 20060703-01-P
ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc
http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.416876
SuSE Security Announcement: SUSE-SR:2006:017 (Google Search)
http://www.novell.com/linux/security/advisories/2006_17_sr.html
http://www.ubuntu.com/usn/usn-314-1
CERT/CC vulnerability note: VU#313836
http://www.kb.cert.org/vuls/id/313836
BugTraq ID: 18927
http://www.securityfocus.com/bid/18927
http://www.frsirt.com/english/advisories/2006/2745
http://securitytracker.com/id?1016459
http://secunia.com/advisories/20980
http://secunia.com/advisories/20983
http://secunia.com/advisories/21018
http://secunia.com/advisories/21019
http://secunia.com/advisories/21046
http://secunia.com/advisories/21086
http://secunia.com/advisories/21143
http://secunia.com/advisories/21187
http://secunia.com/advisories/21190
http://secunia.com/advisories/21159
http://secunia.com/advisories/21262
XForce ISS Database: samba-smbd-connection-dos(27648)
http://xforce.iss.net/xforce/xfdb/27648

Fuente: www.securityspace.com