The ms_fnmatch function in Samba 3.0.4 and 3.0.7 and possibly other versions allows remote authenticated users to cause a denial of service (CPU consumption) via a SAMBA request that contains multiple * (wildcard) characters.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Samba | Samba | 3.0.3 | 3.0.3 |
| Samba | Samba | 3.0.5 | 3.0.5 |
| Samba | Samba | 3.0.6 | 3.0.6 |
| Samba | Sgi | 3.0.1 | 3.0.1 |
| Samba | Sgi | 3.0 | 3.0 |
| Samba | Samba | 3.0.0 | 3.0.0 |
| Samba | Sgi | 3.0.3 | 3.0.3 |
| Samba | Samba | 3.0.7 | 3.0.7 |
| Samba | Sgi | 3.0.4 | 3.0.4 |
| Samba | Sgi | 3.0.6 | 3.0.6 |
| Samba | Sgi | 3.0.5 | 3.0.5 |
| Samba | Sgi | 3.0.7 | 3.0.7 |
| Linux | Conectiva | 10.0 | 10.0 |
| Samba | Samba | 3.0.4 | 3.0.4 |
| Samba | Sgi | 3.0.2 | 3.0.2 |