1. CVE-Search
  2. CVE-2004-0807
ID CVE-2004-0807
Summary Samba 3.0.6 and earlier allows remote attackers to cause a denial of service (infinite loop and memory exhaustion) via certain malformed requests that cause new processes to be spawned and enter an infinite loop.
References
Vulnerable Configurations
  • cpe:2.3:a:samba:samba:3.0.0:*:*:*:*:*:*:*
    cpe:2.3:a:samba:samba:3.0.0:*:*:*:*:*:*:*
  • cpe:2.3:a:samba:samba:3.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:samba:samba:3.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:samba:samba:3.0.2:*:*:*:*:*:*:*
    cpe:2.3:a:samba:samba:3.0.2:*:*:*:*:*:*:*
  • cpe:2.3:a:samba:samba:3.0.2a:*:*:*:*:*:*:*
    cpe:2.3:a:samba:samba:3.0.2a:*:*:*:*:*:*:*
  • cpe:2.3:a:samba:samba:3.0.3:*:*:*:*:*:*:*
    cpe:2.3:a:samba:samba:3.0.3:*:*:*:*:*:*:*
  • cpe:2.3:a:samba:samba:3.0.4:*:*:*:*:*:*:*
    cpe:2.3:a:samba:samba:3.0.4:*:*:*:*:*:*:*
  • cpe:2.3:a:samba:samba:3.0.4:rc1:*:*:*:*:*:*
    cpe:2.3:a:samba:samba:3.0.4:rc1:*:*:*:*:*:*
  • cpe:2.3:a:samba:samba:3.0.5:*:*:*:*:*:*:*
    cpe:2.3:a:samba:samba:3.0.5:*:*:*:*:*:*:*
  • cpe:2.3:a:samba:samba:3.0.6:*:*:*:*:*:*:*
    cpe:2.3:a:samba:samba:3.0.6:*:*:*:*:*:*:*
  • cpe:2.3:a:sgi:samba:3.0:*:irix:*:*:*:*:*
    cpe:2.3:a:sgi:samba:3.0:*:irix:*:*:*:*:*
  • cpe:2.3:a:sgi:samba:3.0.1:*:irix:*:*:*:*:*
    cpe:2.3:a:sgi:samba:3.0.1:*:irix:*:*:*:*:*
  • cpe:2.3:a:sgi:samba:3.0.2:*:irix:*:*:*:*:*
    cpe:2.3:a:sgi:samba:3.0.2:*:irix:*:*:*:*:*
  • cpe:2.3:a:sgi:samba:3.0.3:*:irix:*:*:*:*:*
    cpe:2.3:a:sgi:samba:3.0.3:*:irix:*:*:*:*:*
  • cpe:2.3:a:sgi:samba:3.0.4:*:irix:*:*:*:*:*
    cpe:2.3:a:sgi:samba:3.0.4:*:irix:*:*:*:*:*
  • cpe:2.3:a:sgi:samba:3.0.5:*:irix:*:*:*:*:*
    cpe:2.3:a:sgi:samba:3.0.5:*:irix:*:*:*:*:*
  • cpe:2.3:a:sgi:samba:3.0.6:*:irix:*:*:*:*:*
    cpe:2.3:a:sgi:samba:3.0.6:*:irix:*:*:*:*:*
  • cpe:2.3:o:conectiva:linux:9.0:*:*:*:*:*:*:*
    cpe:2.3:o:conectiva:linux:9.0:*:*:*:*:*:*:*
  • cpe:2.3:o:conectiva:linux:10.0:*:*:*:*:*:*:*
    cpe:2.3:o:conectiva:linux:10.0:*:*:*:*:*:*:*
  • cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:*:*:*:*:*:*
    cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:*:*:*:*:*:*
  • cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:amd64:*:*:*:*:*
    cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:amd64:*:*:*:*:*
  • cpe:2.3:o:suse:suse_linux:8:*:enterprise_server:*:*:*:*:*
    cpe:2.3:o:suse:suse_linux:8:*:enterprise_server:*:*:*:*:*
  • cpe:2.3:o:suse:suse_linux:8.1:*:*:*:*:*:*:*
    cpe:2.3:o:suse:suse_linux:8.1:*:*:*:*:*:*:*
  • cpe:2.3:o:suse:suse_linux:8.2:*:*:*:*:*:*:*
    cpe:2.3:o:suse:suse_linux:8.2:*:*:*:*:*:*:*
  • cpe:2.3:o:suse:suse_linux:9.0:*:*:*:*:*:*:*
    cpe:2.3:o:suse:suse_linux:9.0:*:*:*:*:*:*:*
  • cpe:2.3:o:suse:suse_linux:9.0:*:enterprise_server:*:*:*:*:*
    cpe:2.3:o:suse:suse_linux:9.0:*:enterprise_server:*:*:*:*:*
  • cpe:2.3:o:suse:suse_linux:9.0:*:x86_64:*:*:*:*:*
    cpe:2.3:o:suse:suse_linux:9.0:*:x86_64:*:*:*:*:*
  • cpe:2.3:o:suse:suse_linux:9.1:*:*:*:*:*:*:*
    cpe:2.3:o:suse:suse_linux:9.1:*:*:*:*:*:*:*
CVSS
Base: 5.0 (as of 11-10-2017 - 01:29)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:N/I:N/A:P
oval via4
accepted 2013-04-29T04:11:48.407-04:00
class vulnerability
contributors
  • name Aharon Chernin
    organization SCAP.com, LLC
  • name Dragos Prisaca
    organization G2, Inc.
definition_extensions
  • comment The operating system installed on the system is Red Hat Enterprise Linux 3
    oval oval:org.mitre.oval:def:11782
  • comment CentOS Linux 3.x
    oval oval:org.mitre.oval:def:16651
description Samba 3.0.6 and earlier allows remote attackers to cause a denial of service (infinite loop and memory exhaustion) via certain malformed requests that cause new processes to be spawned and enter an infinite loop.
family unix
id oval:org.mitre.oval:def:11141
status accepted
submitted 2010-07-09T03:56:16-04:00
title Samba 3.0.6 and earlier allows remote attackers to cause a denial of service (infinite loop and memory exhaustion) via certain malformed requests that cause new processes to be spawned and enter an infinite loop.
version 29
redhat via4
advisories
rhsa
id RHSA-2004:467
rpms
  • samba-0:3.0.7-1.3E
  • samba-client-0:3.0.7-1.3E
  • samba-common-0:3.0.7-1.3E
  • samba-debuginfo-0:3.0.7-1.3E
  • samba-swat-0:3.0.7-1.3E
refmap via4
bugtraq
  • 20040913 Samba 3.0 DoS Vulberabilities (CAN-2004-0807 & CAN-2004-0808)
  • 20040915 [OpenPKG-SA-2004.040] OpenPKG Security Advisory (samba)
conectiva CLA-2004:873
gentoo GLSA-200409-16
idefense 20040913 Samba 3.x SMBD Remote Denial of Service Vulnerability
mandrake MDKSA-2004:092
sgi 20041201-01-P
trustix 2004-0046
Last major update 11-10-2017 - 01:29
Published 13-09-2004 - 04:00
Last modified 11-10-2017 - 01:29
Back to Top