CVE-2004-0882 | Vulnetix

CVE-2004-0882 PUBLISHED CVSS 10 CRITICAL

Buffer overflow in the QFILEPATHINFO request handler in Samba 3.0.x through 3.0.7 may allow remote attackers to execute arbitrary code via a TRANSACT2_QFILEPATHINFO request with a small "maximum data bytes" value.

EPSS 13.73% · 96.5th percentile

Risk Scores

CVSS 2.0

EPSS Score

13.73%

96.5th percentile

Affected Products

Vendor	Product	Versions
redhat	enterprise_linux_desktop	3.0
n/a	n/a	n/a
conectiva	linux	10.0
redhat	fedora_core	core_3.0, core_2.0
redhat	enterprise_linux	3.0, 2.1
samba	samba	3.0.3, 3.0.2, 3.0.6
redhat	linux_advanced_workstation	2.1
ubuntu	ubuntu_linux	4.1

Timeline

CVE Published
Feb 4, 2022 EPSS Score
Mar 29, 2022 EPSS Score
Jul 12, 2022 EPSS Score
Sep 4, 2022 EPSS Score
Oct 27, 2022 EPSS Score
Dec 19, 2022 EPSS Score
Mar 7, 2023 EPSS Score
Apr 4, 2023 EPSS Score
May 26, 2023 EPSS Score
Jul 18, 2023 EPSS Score
Nov 1, 2023 EPSS Score

References

VU#457622 third-party-advisory
2004-0058 vendor-advisory
11782 vdb
P-038 third-party-advisory
SUSE-SA:2004:040 vendor-advisory
20041217 [OpenPKG-SA-2004.054] OpenPKG Security Advisory (samba) mailing-list
SCOSA-2005.17 vendor-advisory
https://nvd.nist.gov/vuln/detail/CVE-2004-0882 advisory
http://www.trustix.net/errata/2004/0058 url
ftp://patches.sgi.com/support/free/security/advisories/20041201-01-P technical
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000899 technical
http://lists.apple.com/archives/security-announce/2005/Mar/msg00000.html technical
http://marc.info/?l=bugtraq&m=110054671403755&w=2 technical
http://secunia.com/advisories/13189 technical
http://security.e-matters.de/advisories/132004.html technical
http://securitytracker.com/id?1012235 technical
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9969 technical
http://marc.info/?l=bugtraq&m=110055646329581&w=2 technical
https://exchange.xforce.ibmcloud.com/vulnerabilities/18070 technical

Open in Interactive Console →