smbd in Samba before 2.2.11 allows remote attackers to cause a denial of service (daemon crash) by sending a FindNextPrintChangeNotify request without a previous FindFirstPrintChangeNotify, as demonstrated by the SMB client in Windows XP SP2.
https://exchange.xforce.ibmcloud.com/vulnerabilities/17138
http://www.trustix.org/errata/2004/0043
http://www.gentoo.org/security/en/glsa/glsa-200409-14.xml