NT Versions Affected:

3.5, 3.51

Problem

Sending a "DIR ..\" command to a Windows NT version 3.5 or 3.51 computer from a Samba SMB client will cause a blue screen on the Windows NT computer and one of the following STOP messages:

STOP Message 0x0000001E

-or-

STOP Message 0x0000001A

-or-

STOP Message 0x00000019

This problem is caused by heap corruption in SRV.SYS.

Verification:

http://www.microsoft.com/kb/articles/q140/8/18.htm