Samba < 3.0.6 Unspecified Remote Memory Leak Information Disclosure

medium Nessus Plugin ID 17721

Language:

Synopsis

The remote host is running a service that contains multiple memory leaks.

Description

According to its banner, the version of Samba running on the remote host is earlier than 3.0.6. Such versions contain multiple memory leaks that can allow remote, unauthorized information disclosure and a remote denial of service attack.

Note that Nessus has not actually tried to exploit this issue or determine if the issue has been fixed by a backported patch.

Solution

Upgrade to Samba 3.0.6 or higher.

Plugin Details

Severity: Medium

ID: 17721

File Name: samba_3_0_6.nasl

Version: 1.6

Type: remote

Family: Misc.

Published: 11/18/2011

Updated: 6/14/2024

Configuration: Enable paranoid mode

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 5.2

CVSS v2

Risk Factor: Medium

Base Score: 6.4

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:P

Vulnerability Information

CPE: cpe:/a:samba:samba

Required KB Items: Settings/ParanoidReport, SMB/samba, SMB/NativeLanManager

Patch Publication Date: 8/19/2004

Vulnerability Publication Date: 8/26/2004

Reference Information

CVE: CVE-2004-2546

IAVA: 2023-A-0535

Detections

Analytics