Lucene search

K
ubuntucveUbuntu.comUB:CVE-2004-0883
HistoryJan 10, 2005 - 12:00 a.m.

CVE-2004-0883

2005-01-1000:00:00
ubuntu.com
ubuntu.com
13

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:N/A:P

0.106 Low

EPSS

Percentile

95.0%

Multiple vulnerabilities in the samba filesystem (smbfs) in Linux kernel
2.4 and 2.6 allow remote samba servers to cause a denial of service (crash)
or gain sensitive information from kernel memory via a samba server (1)
returning more data than requested to the smb_proc_read function, (2)
returning a data offset from outside the samba packet to the smb_proc_readX
function, (3) sending a certain TRANS2 fragmented packet to the
smb_receive_trans2 function, (4) sending a samba packet with a certain
header size to the smb_proc_readX_data function, or (5) sending a certain
packet based offset for the data in a packet to the smb_receive_trans2
function.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchlinux-source-2.6.15< 2.6.15-29.58UNKNOWN
ubuntu6.10noarchlinux-source-2.6.17< 2.6.17.1-12.40UNKNOWN

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:N/A:P

0.106 Low

EPSS

Percentile

95.0%