Lucene search

K
ubuntuUbuntuUSN-22-1
HistoryNov 10, 2004 - 12:00 a.m.

samba vulnerability

2004-11-1000:00:00
ubuntu.com
33

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

6.2 Medium

AI Score

Confidence

Low

0.052 Low

EPSS

Percentile

93.0%

Releases

  • Ubuntu 4.10

Details

Karol Wiesek discovered a Denial of Service vulnerability in samba. A
flaw in the input validation routines used to match filename strings
containing wildcard characters may allow a remote user to consume more
than normal amounts of CPU resources, thus impacting the performance
and response of the server. In some circumstances the server can
become entirely unresponsive.

OSVersionArchitecturePackageVersionFilename
Ubuntu4.10noarchsamba< *UNKNOWN

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

6.2 Medium

AI Score

Confidence

Low

0.052 Low

EPSS

Percentile

93.0%