Lucene search
RedHatRHSA-2004:670HistoryDec 16, 2004 - 12:00 a.m.
(RHSA-2004:670) samba security update
2004-12-1600:00:00
access.redhat.com
10
EPSS
0.111
Percentile
95.2%
Samba provides file and printer sharing services to SMB/CIFS clients.
Greg MacManus of iDEFENSE Labs has discovered an integer overflow bug in
Samba versions prior to 3.0.10. An authenticated remote user could exploit
this bug which may lead to arbitrary code execution on the Samba server.
The Common Vulnerabilities and Exposures project (cve.mitre.org) has
assigned the name CAN-2004-1154 to this issue.
Users of Samba should upgrade to these updated packages, which contain
backported security patches, and are not vulnerable to these issues.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | any | ia64 | samba-common | < 3.0.9-1.3E.1 | samba-common-3.0.9-1.3E.1.ia64.rpm |
| RedHat | any | ia64 | samba-swat | < 3.0.9-1.3E.1 | samba-swat-3.0.9-1.3E.1.ia64.rpm |
| RedHat | any | ia64 | samba-client | < 3.0.9-1.3E.1 | samba-client-3.0.9-1.3E.1.ia64.rpm |
| RedHat | any | i386 | samba | < 3.0.9-1.3E.1 | samba-3.0.9-1.3E.1.i386.rpm |
| RedHat | any | ia64 | samba | < 3.0.9-1.3E.1 | samba-3.0.9-1.3E.1.ia64.rpm |
| RedHat | any | i386 | samba-common | < 3.0.9-1.3E.1 | samba-common-3.0.9-1.3E.1.i386.rpm |
Related
cert
cert
Samba vulnerable to integer overflow processing file security descriptors
2004-12-17 00:00:00
cvelist
cvelist
CVE-2004-1154
2004-12-22 05:00:00
openvas
openvas
Debian Security Advisory DSA 701-1 (samba)
2008-01-17 00:00:00
Gentoo Security Advisory GLSA 200412-13 (Samba)
2008-09-24 00:00:00
FreeBSD Ports: samba, ja-samba
2008-09-04 00:00:00
nessus
nessus
Debian DSA-701-2 : samba - integer overflows
2005-04-01 00:00:00
RHEL 2.1 : samba (RHSA-2004:681)
2004-12-23 00:00:00
GLSA-200412-13 : Samba: Integer overflow
2004-12-19 00:00:00
freebsd
freebsd
samba -- integer overflow vulnerability
2004-12-02 00:00:00
redhat
redhat
(RHSA-2005:020) samba security update
2005-01-05 00:00:00
(RHSA-2004:681) samba security update
2004-12-21 00:00:00
suse
suse
remote privilege escalation in samba
2004-12-22 14:28:08
securityvulns
securityvulns
debiancve
debiancve
CVE-2004-1154
2005-01-10 05:00:00
gentoo
gentoo
Samba: Integer overflow
2004-12-17 00:00:00
debian
debian
[SECURITY] [DSA 701-1] New samba packages fix arbitrary code execution
2005-03-31 13:40:06
[SECURITY] [DSA 701-2] New samba packages fix correct sporadic crash
2005-04-21 16:30:39
[SECURITY] [DSA 701-2] New samba packages fix correct sporadic crash
2005-04-21 16:30:39
ubuntu
ubuntu
Samba vulnerability
2004-12-18 00:00:00
nvd
nvd
CVE-2004-1154
2005-01-10 05:00:00
samba
samba
Possible remote code execution
2004-12-16 00:00:00
ubuntucve
ubuntucve
CVE-2004-1154
2005-01-10 00:00:00
cve
cve
CVE-2004-1154
2005-01-10 05:00:00