Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2004-1154
HistoryJan 10, 2005 - 5:00 a.m.

CVE-2004-1154

2005-01-1005:00:00
[email protected]
web.nvd.nist.gov
7

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.5

Confidence

Low

EPSS

0.111

Percentile

95.2%

JSON

Integer overflow in the Samba daemon (smbd) in Samba 2.x and 3.0.x through 3.0.9 allows remote authenticated users to cause a denial of service (application crash) and possibly execute arbitrary code via a Samba request with a large number of security descriptors that triggers a heap-based buffer overflow.

Affected configurations

Nvd
Node
sambasambaMatch2.0.0
OR
sambasambaMatch2.0.1
OR
sambasambaMatch2.0.2
OR
sambasambaMatch2.0.3
OR
sambasambaMatch2.0.4
OR
sambasambaMatch2.0.5
OR
sambasambaMatch2.0.6
OR
sambasambaMatch2.0.7
OR
sambasambaMatch2.0.8
OR
sambasambaMatch2.0.9
OR
sambasambaMatch2.0.10
OR
sambasambaMatch2.2.0
OR
sambasambaMatch2.2.0a
OR
sambasambaMatch2.2.1a
OR
sambasambaMatch2.2.2
OR
sambasambaMatch2.2.3
OR
sambasambaMatch2.2.3a
OR
sambasambaMatch2.2.4
OR
sambasambaMatch2.2.5
OR
sambasambaMatch2.2.6
OR
sambasambaMatch2.2.7
OR
sambasambaMatch2.2.7a
OR
sambasambaMatch2.2.8
OR
sambasambaMatch2.2.8a
OR
sambasambaMatch2.2.9
OR
sambasambaMatch2.2.11
OR
sambasambaMatch2.2.12
OR
sambasambaMatch2.2a
OR
sambasambaMatch3.0.0
OR
sambasambaMatch3.0.1
OR
sambasambaMatch3.0.2
OR
sambasambaMatch3.0.2a
OR
sambasambaMatch3.0.3
OR
sambasambaMatch3.0.4
OR
sambasambaMatch3.0.4rc1
OR
sambasambaMatch3.0.5
OR
sambasambaMatch3.0.6
OR
sambasambaMatch3.0.7
OR
sambasambaMatch3.0.8
OR
sambasambaMatch3.0.9
Node
redhatfedora_coreMatchcore_2.0
OR
redhatfedora_coreMatchcore_3.0
OR
susesuse_linuxMatch1.0desktop
OR
susesuse_linuxMatch8.1
OR
susesuse_linuxMatch8.2
OR
susesuse_linuxMatch9.0
OR
susesuse_linuxMatch9.0enterprise_server
OR
susesuse_linuxMatch9.0x86_64
OR
susesuse_linuxMatch9.1
OR
susesuse_linuxMatch9.2
OR
trustixsecure_linuxMatch2.0
OR
trustixsecure_linuxMatch2.1
OR
trustixsecure_linuxMatch2.2
VendorProductVersionCPE
sambasamba2.0.0cpe:2.3:a:samba:samba:2.0.0:*:*:*:*:*:*:*
sambasamba2.0.1cpe:2.3:a:samba:samba:2.0.1:*:*:*:*:*:*:*
sambasamba2.0.2cpe:2.3:a:samba:samba:2.0.2:*:*:*:*:*:*:*
sambasamba2.0.3cpe:2.3:a:samba:samba:2.0.3:*:*:*:*:*:*:*
sambasamba2.0.4cpe:2.3:a:samba:samba:2.0.4:*:*:*:*:*:*:*
sambasamba2.0.5cpe:2.3:a:samba:samba:2.0.5:*:*:*:*:*:*:*
sambasamba2.0.6cpe:2.3:a:samba:samba:2.0.6:*:*:*:*:*:*:*
sambasamba2.0.7cpe:2.3:a:samba:samba:2.0.7:*:*:*:*:*:*:*
sambasamba2.0.8cpe:2.3:a:samba:samba:2.0.8:*:*:*:*:*:*:*
sambasamba2.0.9cpe:2.3:a:samba:samba:2.0.9:*:*:*:*:*:*:*
Rows per page:
1-10 of 531

References

Related

cert 1
cvelist 1
openvas 10
nessus 36
freebsd 1
redhat 3
suse 1
securityvulns 2
debiancve 1
gentoo 1
debian 4
ubuntu 1
samba 1
ubuntucve 1
cve 1
cert
cert
Samba vulnerable to integer overflow processing file security descriptors
2004-12-17 00:00:00
cvelist
cvelist
CVE-2004-1154
2004-12-22 05:00:00
openvas
openvas
Debian Security Advisory DSA 701-1 (samba)
2008-01-17 00:00:00
Gentoo Security Advisory GLSA 200412-13 (Samba)
2008-09-24 00:00:00
FreeBSD Ports: samba, ja-samba
2008-09-04 00:00:00
nessus
nessus
Debian DSA-701-2 : samba - integer overflows
2005-04-01 00:00:00
RHEL 2.1 : samba (RHSA-2004:681)
2004-12-23 00:00:00
GLSA-200412-13 : Samba: Integer overflow
2004-12-19 00:00:00
freebsd
freebsd
samba -- integer overflow vulnerability
2004-12-02 00:00:00
redhat
redhat
(RHSA-2005:020) samba security update
2005-01-05 00:00:00
(RHSA-2004:670) samba security update
2004-12-16 00:00:00
(RHSA-2004:681) samba security update
2004-12-21 00:00:00
suse
suse
remote privilege escalation in samba
2004-12-22 14:28:08
securityvulns
securityvulns
[SAMBA] CAN-2004-1154 : Integer overflow could lead to remote code execution in Samba 2.x, 3.0.x <= 3.0.9
2004-12-16 00:00:00
iDEFENSE Security Advisory 12.16.04: Samba smbd Security Descriptor Integer Overflow Vulnerability
2004-12-17 00:00:00
debiancve
debiancve
CVE-2004-1154
2005-01-10 05:00:00
gentoo
gentoo
Samba: Integer overflow
2004-12-17 00:00:00
debian
debian
[SECURITY] [DSA 701-1] New samba packages fix arbitrary code execution
2005-03-31 13:40:06
[SECURITY] [DSA 701-2] New samba packages fix correct sporadic crash
2005-04-21 16:30:39
[SECURITY] [DSA 701-2] New samba packages fix correct sporadic crash
2005-04-21 16:30:39
ubuntu
ubuntu
Samba vulnerability
2004-12-18 00:00:00
samba
samba
Possible remote code execution
2004-12-16 00:00:00
ubuntucve
ubuntucve
CVE-2004-1154
2005-01-10 00:00:00
cve
cve
CVE-2004-1154
2005-01-10 05:00:00

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.5

Confidence

Low

EPSS

0.111

Percentile

95.2%

JSON
Related for NVD:CVE-2004-1154
cert1cvelist1openvas10nessus36freebsd1redhat3suse1securityvulns2debiancve1gentoo1debian4ubuntu1samba1ubuntucve1cve1