CVE-2004-1154
CVE-2004-1154
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
Integer overflow in the Samba daemon (smbd) in Samba 2.x and 3.0.x through 3.0.9 allows remote authenticated users to cause a denial of service (application crash) and possibly execute arbitrary code via a Samba request with a large number of security descriptors that triggers a heap-based buffer overflow.
EPSS 13,2% · Corrección disponible
- Publicación
- Actualización
Pila tecnológica: system
Productos y versiones afectados
n/a
- Versiones
- n/a: Afectada
Sin corrección publicada
samba Debian:12
- Intervalos de versiones afectados
- ECOSYSTEM: < 3.0.10-1
Actualiza a 3.0.10-1
samba Debian:13
- Intervalos de versiones afectados
- ECOSYSTEM: < 3.0.10-1
Actualiza a 3.0.10-1
samba Debian:14
- Intervalos de versiones afectados
- ECOSYSTEM: < 3.0.10-1
Actualiza a 3.0.10-1
Fuentes originales
- http://www.samba.org/samba/security/CAN-2004-1154.html
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-101643-1
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10236
- http://www.securityfocus.com/bid/11973
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18519
- http://www.redhat.com/support/errata/RHSA-2005-020.html
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A642
- http://secunia.com/advisories/13453/
- http://www.debian.org/security/2005/dsa-701
- http://lists.apple.com/archives/security-announce/2005/Mar/msg00000.html
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-57730-1
- http://www.idefense.com/application/poi/display?id=165&type=vulnerabilities
- http://www.novell.com/linux/security/advisories/2004_45_samba.html
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1459
- http://www.kb.cert.org/vuls/id/226184
- https://nvd.nist.gov/vuln/detail/CVE-2004-1154