Lucene search

K
ubuntuUbuntuUSN-41-1
HistoryDec 18, 2004 - 12:00 a.m.

Samba vulnerability

2004-12-1800:00:00
ubuntu.com
41

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.9

Confidence

Low

EPSS

0.111

Percentile

95.2%

Releases

  • Ubuntu 4.10

Details

Greg MacManus discovered an integer overflow in Samba’s smbd daemon.
Requesting a very large number of access control descriptors from the
server caused an integer overflow, which resulted in a memory
allocation being too short, thus causing a buffer overflow. By sending
carefully crafted data, an attacker could exploit this to execute
arbitrary code on the server with full root permissions.

OSVersionArchitecturePackageVersionFilename
Ubuntu4.10noarchsamba< *UNKNOWN

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.9

Confidence

Low

EPSS

0.111

Percentile

95.2%