Upstream information
Description
smbd in Samba 3.0.6 through 3.0.23d allows remote authenticated users to cause a denial of service (memory and CPU exhaustion) by renaming a file in a way that prevents a request from being removed from the deferred open queue, which triggers an infinite loop.SUSE information
Overall state of this security issue: Resolved
This issue is currently rated as having moderate severity.
| CVSS detail | National Vulnerability Database | 
|---|---|
| Base Score | 6.8 | 
| Vector | AV:N/AC:L/Au:S/C:N/I:N/A:C | 
| Access Vector | Network | 
| Access Complexity | Low | 
| Authentication | Single | 
| Confidentiality Impact | None | 
| Integrity Impact | None | 
| Availability Impact | Complete | 
SUSE Security Advisories:
- SUSE-SA:2007:016, published Thu, 15 Feb 2007 15:00:00 +0000
List of released packages
| Product(s) | Fixed package version(s) | References | 
|---|---|---|
| SUSE Linux Enterprise Desktop 11 SP4 SUSE Linux Enterprise Server for SAP Applications 11 SP4 SUSE Linux Enterprise Software Development Kit 11 SP4 | 
 | Patchnames: SUSE Linux Enterprise Software Development Kit 11 SP4 GA libldb-devel-3.6.3-0.58.1 | 
| SUSE Linux Enterprise Server 11 SP1 | 
 | Patchnames: SUSE Linux Enterprise Server 11 SP1 GA cifs-mount-3.4.3-1.17.2 | 
| SUSE Linux Enterprise Server 11 SP2 | 
 | Patchnames: SUSE Linux Enterprise Server 11 SP2 GA cifs-utils-5.1-0.4.9 SUSE Linux Enterprise Server 11 SP2 GA ldapsmb-1.34b-12.18.3 | 
| SUSE Linux Enterprise Server 11 SP3 | 
 | Patchnames: SUSE Linux Enterprise Server 11 SP3 GA cifs-utils-5.1-0.11.1 SUSE Linux Enterprise Server 11 SP3 GA ldapsmb-1.34b-12.39.1 | 
| SUSE Linux Enterprise Server 11 SP4 | 
 | Patchnames: SUSE Linux Enterprise Server 11 SP4 GA cifs-utils-5.1-0.14.46 SUSE Linux Enterprise Server 11 SP4 GA ldapsmb-1.34b-12.58.1 SUSE Linux Enterprise Server 11 SP4 GA libtevent0-x86-3.6.3-0.39.1 SUSE Linux Enterprise Software Development Kit 11 SP4 GA libldb-devel-3.6.3-0.58.1 | 
| SUSE Linux Micro 6.0 | 
 | Patchnames: SUSE Linux Micro 6.0 GA cifs-utils-7.0-2.9 SUSE Linux Micro 6.0 GA samba-client-libs-4.19.4+git.339.acf1ccaa02-1.22 | 
| SUSE Linux Micro 6.1 | 
 | Patchnames: SUSE Linux Micro 6.1 GA cifs-utils-7.0-slfo.1.1_1.1 SUSE Linux Micro 6.1 GA samba-client-libs-4.20.2+git.348.4fb6af61307-slfo.1.1_1.8 | 
| openSUSE Tumbleweed | 
 | Patchnames: openSUSE-Tumbleweed-2024-10683 openSUSE-Tumbleweed-2024-11365 | 
SUSE Timeline for this CVE
CVE page created: Fri Jun 28 02:00:54 2013CVE page last modified: Mon Oct 6 18:14:52 2025
