NVD

CVE-2007-0452 Detail

Modified

This vulnerability has been modified since it was last analyzed by the NVD. It is awaiting reanalysis which may result in further changes to the information provided.

Description

smbd in Samba 3.0.6 through 3.0.23d allows remote authenticated users to cause a denial of service (memory and CPU exhaustion) by renaming a file in a way that prevents a request from being removed from the deferred open queue, which triggers an infinite loop.

Metrics

NVD enrichment efforts reference publicly available information to associate vector strings. CVSS information contributed by other sources is also displayed.

CVSS 4.0 Severity and Vector Strings:

NIST: NVD

N/A

NVD assessment not yet provided.

CVSS 3.x Severity and Vector Strings:

NIST: NVD

Base Score: N/A

NVD assessment not yet provided.

CVSS 2.0 Severity and Vector Strings:

National Institute of Standards and Technology

NIST: NVD

Base Score: 6.8 MEDIUM

Vector: (AV:N/AC:L/Au:S/C:N/I:N/A:C)

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

Hyperlink	Resource
ftp://patches.sgi.com/support/free/security/advisories/20070201-01-P.asc
ftp://patches.sgi.com/support/free/security/advisories/20070201-01-P.asc
http://fedoranews.org/cms/node/2579
http://fedoranews.org/cms/node/2579
http://fedoranews.org/cms/node/2580
http://fedoranews.org/cms/node/2580
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00943462
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00943462
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00943462
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00943462
http://lists.suse.com/archive/suse-security-announce/2007-Feb/0002.html
http://lists.suse.com/archive/suse-security-announce/2007-Feb/0002.html
http://osvdb.org/33100
http://osvdb.org/33100
http://secunia.com/advisories/24021
http://secunia.com/advisories/24021
http://secunia.com/advisories/24030
http://secunia.com/advisories/24030
http://secunia.com/advisories/24046
http://secunia.com/advisories/24046
http://secunia.com/advisories/24060
http://secunia.com/advisories/24060
http://secunia.com/advisories/24067
http://secunia.com/advisories/24067
http://secunia.com/advisories/24076
http://secunia.com/advisories/24076
http://secunia.com/advisories/24101
http://secunia.com/advisories/24101
http://secunia.com/advisories/24140
http://secunia.com/advisories/24140
http://secunia.com/advisories/24145
http://secunia.com/advisories/24145
http://secunia.com/advisories/24151
http://secunia.com/advisories/24151
http://secunia.com/advisories/24188
http://secunia.com/advisories/24188
http://secunia.com/advisories/24284
http://secunia.com/advisories/24284
http://secunia.com/advisories/24792
http://secunia.com/advisories/24792
http://securityreason.com/securityalert/2219
http://securityreason.com/securityalert/2219
http://securitytracker.com/id?1017587
http://securitytracker.com/id?1017587
http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.476916
http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.476916
http://sunsolve.sun.com/search/document.do?assetkey=1-66-200588-1
http://sunsolve.sun.com/search/document.do?assetkey=1-66-200588-1
http://us1.samba.org/samba/security/CVE-2007-0452.html
http://us1.samba.org/samba/security/CVE-2007-0452.html
http://www.debian.org/security/2007/dsa-1257
http://www.debian.org/security/2007/dsa-1257
http://www.gentoo.org/security/en/glsa/glsa-200702-01.xml
http://www.gentoo.org/security/en/glsa/glsa-200702-01.xml
http://www.mandriva.com/security/advisories?name=MDKSA-2007:034
http://www.mandriva.com/security/advisories?name=MDKSA-2007:034
http://www.redhat.com/support/errata/RHSA-2007-0060.html
http://www.redhat.com/support/errata/RHSA-2007-0060.html
http://www.redhat.com/support/errata/RHSA-2007-0061.html
http://www.redhat.com/support/errata/RHSA-2007-0061.html
http://www.securityfocus.com/archive/1/459167/100/0/threaded
http://www.securityfocus.com/archive/1/459167/100/0/threaded
http://www.securityfocus.com/archive/1/459365/100/0/threaded
http://www.securityfocus.com/archive/1/459365/100/0/threaded
http://www.securityfocus.com/bid/22395
http://www.securityfocus.com/bid/22395
http://www.trustix.org/errata/2007/0007
http://www.trustix.org/errata/2007/0007
http://www.ubuntu.com/usn/usn-419-1
http://www.ubuntu.com/usn/usn-419-1
http://www.vupen.com/english/advisories/2007/0483
http://www.vupen.com/english/advisories/2007/0483
http://www.vupen.com/english/advisories/2007/1278
http://www.vupen.com/english/advisories/2007/1278
https://exchange.xforce.ibmcloud.com/vulnerabilities/32301
https://exchange.xforce.ibmcloud.com/vulnerabilities/32301
https://issues.rpath.com/browse/RPL-1005
https://issues.rpath.com/browse/RPL-1005
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9758
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9758

Weakness Enumeration

CWE-ID	CWE Name	Source
NVD-CWE-Other	Other	NIST

Known Affected Software Configurations Switch to CPE 2.2

CPEs loading, please wait.

Denotes Vulnerable Software
Are we missing a CPE here? Please let us know.

Change History

6 change records found show changes

CVE Modified by CVE 11/20/2024 7:25:54 PM

Action	Type	New Value
Added	Reference	ftp://patches.sgi.com/support/free/security/advisories/20070201-01-P.asc
Added	Reference	http://fedoranews.org/cms/node/2579
Added	Reference	http://fedoranews.org/cms/node/2580
Added	Reference	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00943462
Added	Reference	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00943462
Added	Reference	http://lists.suse.com/archive/suse-security-announce/2007-Feb/0002.html
Added	Reference	http://osvdb.org/33100
Added	Reference	http://secunia.com/advisories/24021
Added	Reference	http://secunia.com/advisories/24030
Added	Reference	http://secunia.com/advisories/24046
Added	Reference	http://secunia.com/advisories/24060
Added	Reference	http://secunia.com/advisories/24067
Added	Reference	http://secunia.com/advisories/24076
Added	Reference	http://secunia.com/advisories/24101
Added	Reference	http://secunia.com/advisories/24140
Added	Reference	http://secunia.com/advisories/24145
Added	Reference	http://secunia.com/advisories/24151
Added	Reference	http://secunia.com/advisories/24188
Added	Reference	http://secunia.com/advisories/24284
Added	Reference	http://secunia.com/advisories/24792
Added	Reference	http://securityreason.com/securityalert/2219
Added	Reference	http://securitytracker.com/id?1017587
Added	Reference	http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.476916
Added	Reference	http://sunsolve.sun.com/search/document.do?assetkey=1-66-200588-1
Added	Reference	http://us1.samba.org/samba/security/CVE-2007-0452.html
Added	Reference	http://www.debian.org/security/2007/dsa-1257
Added	Reference	http://www.gentoo.org/security/en/glsa/glsa-200702-01.xml
Added	Reference	http://www.mandriva.com/security/advisories?name=MDKSA-2007:034
Added	Reference	http://www.redhat.com/support/errata/RHSA-2007-0060.html
Added	Reference	http://www.redhat.com/support/errata/RHSA-2007-0061.html
Added	Reference	http://www.securityfocus.com/archive/1/459167/100/0/threaded
Added	Reference	http://www.securityfocus.com/archive/1/459365/100/0/threaded
Added	Reference	http://www.securityfocus.com/bid/22395
Added	Reference	http://www.trustix.org/errata/2007/0007
Added	Reference	http://www.ubuntu.com/usn/usn-419-1
Added	Reference	http://www.vupen.com/english/advisories/2007/0483
Added	Reference	http://www.vupen.com/english/advisories/2007/1278
Added	Reference	https://exchange.xforce.ibmcloud.com/vulnerabilities/32301
Added	Reference	https://issues.rpath.com/browse/RPL-1005
Added	Reference	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9758

Quick Info

CVE Dictionary Entry:
CVE-2007-0452
NVD Published Date:
02/05/2007
NVD Last Modified:
11/20/2024
Source:
Red Hat, Inc.

You are viewing this page in an unauthorized frame window.

Information Technology Laboratory

National Vulnerability Database

National Vulnerability Database

CVE-2007-0452 Detail

Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Known Affected Software Configurations Switch to CPE 2.2

CPEs loading, please wait.

Change History

CVE Modified by CVE 11/20/2024 7:25:54 PM

CVE Modified by Red Hat, Inc. 5/13/2024 9:42:44 PM

CVE Modified by Red Hat, Inc. 10/16/2018 12:32:45 PM

CVE Modified by Red Hat, Inc. 10/10/2017 9:31:36 PM

CVE Modified by Red Hat, Inc. 7/28/2017 9:30:11 PM

Initial CVE Analysis 2/06/2007 10:40:00 AM

Quick Info