CVE-2004-0882
CVE-2004-0882
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Buffer overflow in the QFILEPATHINFO request handler in Samba 3.0.x through 3.0.7 may allow remote attackers to execute arbitrary code via a TRANSACT2_QFILEPATHINFO request with a small "maximum data bytes" value.
EPSS 13.7% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
Original sources
- http://securitytracker.com/id?1012235
- http://marc.info/?l=bugtraq&m=110055646329581&w=2
- http://marc.info/?l=bugtraq&m=110330519803655&w=2
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18070
- http://www.kb.cert.org/vuls/id/457622
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000899
- http://secunia.com/advisories/13189
- http://security.e-matters.de/advisories/132004.html
- http://marc.info/?l=bugtraq&m=110054671403755&w=2
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9969
- http://lists.apple.com/archives/security-announce/2005/Mar/msg00000.html
- http://www.trustix.net/errata/2004/0058/
- http://www.osvdb.org/11782
- http://www.ciac.org/ciac/bulletins/p-038.shtml
- http://www.novell.com/linux/security/advisories/2004_40_samba.html
- https://nvd.nist.gov/vuln/detail/CVE-2004-0882