DescriptionThe smb_recv_trans2 function call in the samba filesystem (smbfs) in Linux kernel 2.4 and 2.6 does not properly handle the re-assembly of fragmented packets correctly, which could allow remote samba servers to (1) read arbitrary kernel information or (2) raise a counter value to an arbitrary number by sending the first part of the fragmented packet multiple times.
Overall state of this security issue: Resolved
This issue is currently rated as having important severity.
|National Vulnerability Database|
SUSE Security Advisories:
- SUSE-SA:2004:042, published Wednesday, Dec 1st 2004 15:00 MEST
SUSE Timeline for this CVECVE page created: Fri Jun 28 01:00:52 2013
CVE page last modified: Fri Oct 7 12:45:29 2022