Lucene search

K
cve[email protected]CVE-2004-0808
HistoryDec 31, 2004 - 5:00 a.m.

CVE-2004-0808

2004-12-3105:00:00
web.nvd.nist.gov
29
samba
cve-2004-0808
denial of service
security vulnerability
nvd
samba 3.0.6

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

6.2 Medium

AI Score

Confidence

Low

0.066 Low

EPSS

Percentile

93.8%

The process_logon_packet function in the nmbd server for Samba 3.0.6 and earlier, when domain logons are enabled, allows remote attackers to cause a denial of service via a SAM_UAS_CHANGE request with a length value that is larger than the number of structures that are provided.

Affected configurations

NVD
Node
sambasambaMatch3.0.0
OR
sambasambaMatch3.0.1
OR
sambasambaMatch3.0.2
OR
sambasambaMatch3.0.2a
OR
sambasambaMatch3.0.3
OR
sambasambaMatch3.0.4
OR
sambasambaMatch3.0.4rc1
OR
sambasambaMatch3.0.5
OR
sambasambaMatch3.0.6

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

6.2 Medium

AI Score

Confidence

Low

0.066 Low

EPSS

Percentile

93.8%