CVE-2004-1154
CVE-2004-1154
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Integer overflow in the Samba daemon (smbd) in Samba 2.x and 3.0.x through 3.0.9 allows remote authenticated users to cause a denial of service (application crash) and possibly execute arbitrary code via a Samba request with a large number of security descriptors that triggers a heap-based buffer overflow.
EPSS 13.2% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
Original sources
- http://www.samba.org/samba/security/CAN-2004-1154.html
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-101643-1
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10236
- http://www.securityfocus.com/bid/11973
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18519
- http://www.redhat.com/support/errata/RHSA-2005-020.html
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A642
- http://secunia.com/advisories/13453/
- http://www.debian.org/security/2005/dsa-701
- http://lists.apple.com/archives/security-announce/2005/Mar/msg00000.html
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-57730-1
- http://www.idefense.com/application/poi/display?id=165&type=vulnerabilities
- http://www.novell.com/linux/security/advisories/2004_45_samba.html
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1459
- http://www.kb.cert.org/vuls/id/226184
- https://nvd.nist.gov/vuln/detail/CVE-2004-1154