CVE:CVE-2004-0930
CNNVD:CNNVD-200501-303
Samba是一套实现SMB(Server Messages Block)协议，跨平台进行文件共享和打印共享服务的开源程序。
Samba3.0.4及3.0.7的ms_fnmatch函数存在缺陷，可导致拒绝服务攻击，在其他版本的Samba软件中，也可能存在该漏洞。
远程通过认证的攻击者可通过包含多个'*'通配符的SAMBA请求，导致大量的CPU消耗，从而造成拒绝服务。
solution:Upgrade samba samba to a higher version than 3.0.0,3.0.3,3.0.4,3.0.5,3.0.6,3.0.7,and avoid the version 3.0.0,3.0.3,3.0.4,3.0.5,3.0.6,3.0.7; Upgrade sgi samba to a higher version than 3.0,3.0.1,3.0.2,3.0.3,3.0.4,3.0.5,3.0.6,3.0.7,and avoid the version 3.0,3.0.1,3.0.2,3.0.3,3.0.4,3.0.5,3.0.6,3.0.7; Upgrade conectiva linux to a higher version than 10.0,and avoid the version 10.0; Upgrade gentoo linux to a higher version than *; Upgrade redhat enterprise_linux to a higher version than 2.1,3.0,and avoid the version 2.1,3.0; Upgrade redhat enterprise_linux_desktop to a higher version than 3.0,and avoid the version 3.0; Upgrade redhat fedora_core to a higher version than core_2.0,core_3.0,and avoid the version core_2.0,core_3.0; Upgrade redhat linux_advanced_workstation to a higher version than 2.1,and avoid the version 2.1