CVE-2006-3403 json
The smdb daemon (smbd/service.c) in Samba 3.0.1 through 3.0.22 allows remote attackers to cause a denial of service (memory consumption) vi…
published 2006-07-12 20 y ago modified 2026-06-16 4 mo ago also EUVD-2006-3399
- cvss
- 5.0
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 5.6%
- EPSS 5.6% chance of exploitation in 30 days, percentile 92%
- public exploits
- 0
- none known
Summary
The smdb daemon (smbd/service.c) in Samba 3.0.1 through 3.0.22 allows remote attackers to cause a denial of service (memory consumption) via a large number of share connection requests.
Patch / fix
- samba Debian 14, Debian 13, Debian 12 3.0.23a-1
debian advisories DEBIAN-CVE-2006-3403
- samba RHEL 3 3.0.9-1.3E.10
- samba RHEL 4 3.0.10-1.4E.6.2
- samba-swat RHEL 3 3.0.9-1.3E.10
- samba-swat RHEL 4 3.0.10-1.4E.6.2
- samba-client RHEL 3 3.0.9-1.3E.10
- samba-client RHEL 4 3.0.10-1.4E.6.2
- samba-common RHEL 3 3.0.9-1.3E.10
- samba-common RHEL 4 3.0.10-1.4E.6.2
red hat advisories RHSA-2006:0591
- cifs-utils openSUSE Tumbleweed 6.13-1.3
- samba openSUSE Tumbleweed 4.14.6+git.182.2205d5224e3-1.1
opensuse advisories openSUSE-SU-2024:10683-1openSUSE-SU-2024:11365-1
- samba.org/samba/security/CAN-2006-3403.html patch
- securityfocus.com/bid/18927 patch
- secunia.com/advisories/20983 advisory
- secunia.com/advisories/20980 advisory
Vendor advisories
What the vendors themselves say about their products: affected, fixed or not affected, and what to do.
red hat product security vex CVE-2006-3403 updated
security flaw
-
Red Hat Desktop version 3 samba 3.0.9-1.3E.10, samba-swat 3.0.9-1.3E.10, samba-client 3.0.9-1.3E.10, samba-common 3.0.9-1.3E.10 Red Hat Enterprise Linux AS version 3 samba 3.0.9-1.3E.10, samba-swat 3.0.9-1.3E.10, samba-client 3.0.9-1.3E.10, samba-common 3.0.9-1.3E.10 Red Hat Enterprise Linux AS version 4 samba 3.0.10-1.4E.6.2, samba-swat 3.0.10-1.4E.6.2, samba-client 3.0.10-1.4E.6.2, samba-common 3.0.10-1.4E.6.2 Red Hat Enterprise Linux Desktop version 4 samba 3.0.10-1.4E.6.2, samba-swat 3.0.10-1.4E.6.2, samba-client 3.0.10-1.4E.6.2, samba-common 3.0.10-1.4E.6.2 Red Hat Enterprise Linux ES version 3 samba 3.0.9-1.3E.10, samba-swat 3.0.9-1.3E.10, samba-client 3.0.9-1.3E.10, samba-common 3.0.9-1.3E.10 Red Hat Enterprise Linux ES version 4 samba 3.0.10-1.4E.6.2, samba-swat 3.0.10-1.4E.6.2, samba-client 3.0.10-1.4E.6.2, samba-common 3.0.10-1.4E.6.2fixed: vendor fix RHSA-2006:0591
+2 more productsfewer
Red Hat Enterprise Linux WS version 3 samba 3.0.9-1.3E.10, samba-swat 3.0.9-1.3E.10, samba-client 3.0.9-1.3E.10, samba-common 3.0.9-1.3E.10 Red Hat Enterprise Linux WS version 4 samba 3.0.10-1.4E.6.2, samba-swat 3.0.10-1.4E.6.2, samba-client 3.0.10-1.4E.6.2, samba-common 3.0.10-1.4E.6.2
Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf
Exploit prediction
5.61% chance of exploitation in the next 30 days, higher than 92% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 5.0 | AV:N/AC:L/Au:N/C:N/I:N/A:P |
References
-
secunia.com
/advisories/20983
third-party-advisory, patch, vendor-advisory
-
samba.org
/samba/security/CAN-2006-3403.html
patch
-
securityfocus.com
/bid/18927
vdb-entry, patch
-
secunia.com
/advisories/20980
third-party-advisory, patch, vendor-advisory
-
ubuntu.com
/usn/usn-314-1
vendor-advisory
-
novell.com
/linux/security/advisories/2006_17_sr.html
vendor-advisory
-
slackware.com
/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.416876
vendor-advisory
-
redhat.com
/support/errata/RHSA-2006-0591.html
vendor-advisory
-
lists.apple.com
/archives/security-announce/2006/Nov/msg00001.html
vendor-advisory
-
securityfocus.com
/archive/1/448957/100/0/threaded
vendor-advisory
-
debian.org
/security/2006/dsa-1110
vendor-advisory
-
security.gentoo.org
/glsa/glsa-200607-10.xml
vendor-advisory
-
mandriva.com
/security/advisories?name=MDKSA-2006:120
vendor-advisory
-
secunia.com
/advisories/21187
third-party-advisory
-
vupen.com
/english/advisories/2006/4750
vdb-entry
-
securitytracker.com
/id?1016459
vdb-entry
-
vupen.com
/english/advisories/2006/2745
vdb-entry
-
vupen.com
/english/advisories/2006/4502
vdb-entry
- securitydot.net /xpl/exploits/vulnerabilities/articles/1175/exploit.html
- docs.info.apple.com /article.html?artnum=304829
-
secunia.com
/advisories/22875
third-party-advisory
- vmware.com /download/esx/esx-202-200610-patch.html
-
secunia.com
/advisories/21190
third-party-advisory
-
secunia.com
/advisories/21086
third-party-advisory
-
securityfocus.com
/archive/1/451426/100/200/threaded
mailing-list
- vmware.com /download/esx/esx-213-200610-patch.html
-
secunia.com
/advisories/21262
third-party-advisory
-
securityfocus.com
/archive/1/439880/100/100/threaded
mailing-list
-
securityfocus.com
/archive/1/439875/100/0/threaded
mailing-list
-
kb.cert.org
/vuls/id/313836
third-party-advisory, us-government-resource
-
secunia.com
/advisories/23155
third-party-advisory
-
exchange.xforce.ibmcloud.com
/vulnerabilities/27648
vdb-entry
-
secunia.com
/advisories/21019
third-party-advisory
-
securityfocus.com
/archive/1/440836/100/0/threaded
mailing-list
-
us-cert.gov
/cas/techalerts/TA06-333A.html
third-party-advisory, us-government-resource
-
securityfocus.com
/archive/1/451404/100/0/threaded
mailing-list
-
secunia.com
/advisories/21046
third-party-advisory
-
secunia.com
/advisories/21159
third-party-advisory
-
securityfocus.com
/archive/1/440767/100/0/threaded
mailing-list
-
securityfocus.com
/archive/1/439757/100/0/threaded
mailing-list
- secunia.com /advisories/21018
- secunia.com /advisories/21143
- securityfocus.com /archive/1/451417/100/200/threaded
Sources
- CVE List CVE-2006-3403
- NVD CVE-2006-3403
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.