CAN-2004-0930: Potential Remote Denial of Service Vulnerability in Samba 3.0.x <= 3.0.7

Subject:	Potential Remote Denial of Service
CVE #:		CAN-2004-0930
Versions:	Samba 3.0.x <= 3.0.7

Summary:	A remote attacker could cause and smbd process
		to consume abnormal amounts of system resources
		due to an input validation error when matching
		filenames containing wildcard characters.

Patch Availability

A patch for Samba 3.0.7 (samba-3.0.7-CAN-2004-0930.patch) is
available from
The patch has been signed with the "Samba Distribution Verification
Key"  (ID F17F9772).


A bug in the input validation routines used to match
filename strings containing wildcard characters may allow
a user to consume more than normal amounts of CPU cycles
thus impacting the performance and response of the server.
In some circumstances the server can become entirely

Protecting Unpatched Servers

The Samba Team always encourages users to run the latest stable
release as a defense of against attacks.  However, under certain
circumstances it may not be possible to immediately upgrade
important installations.  In such cases, administrators should
read the "Server Security" documentation found at


This security issue was reported to Samba developers by
iDEFENSE (  Karol Wiesek is credited
with this discovery.

Our Code, Our Bugs, Our Responsibility.

				-- The Samba Team