The chain_reply function in process.c in smbd in Samba before 3.4.8 and 3.5.x before 3.5.2 allows remote attackers to cause a denial of service (NULL pointer dereference and process crash) via a Negotiate Protocol request with a certain 0x0003 field value followed by a Session Setup AndX request with a certain 0x8003 field value.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published: 2010-06-17T16:00:00

Updated: 2024-08-07T01:28:43.269Z

Reserved: 2010-04-29T00:00:00

Link: CVE-2010-1635

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2010-06-17T16:30:01.840

Modified: 2023-02-13T04:18:57.220

Link: CVE-2010-1635

cve-icon Redhat

Severity :

Publid Date: 2010-05-12T00:00:00Z

Links: CVE-2010-1635 - Bugzilla