Intrusion PreventionSamba.Smbd.Session.Setup.AndX.SecurityBlob.Length.DoS
Description
This indicates an attack attempt against a denial-of-service vulnerability in Samba.
The vulnerability is caused by an error when the vulnerable software handles an uninitialized variable in a Session Setup AndX request. It allows a remote attacker to cause a denial of service.
Affected Products
Samba Samba 3.5.1
Samba Samba 3.5
Samba Samba 3.4.7
Samba Samba 3.4.6
Samba Samba 3.4.5
Samba Samba 3.4.2
Samba Samba 3.4.1
Impact
Denial of service
Recommended Actions
Upgrade to the latest version of Samba (3.4.8 or 3.5.2 or later):
http://www.samba.org/
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 23767 |
| Created | Aug 18, 2010 |
| Updated | Jun 06, 2022 |
| Risk |
|
| CVE ID | CVE-2010-1642 |
| Exploit Prediction Score | 41.21% |
| Default Action | drop |
| Active | |
| Affected OS | Linux |
| Affected App | Samba |