CVE-2004-0930 | Vulnetix

CVE-2004-0930 PUBLISHED CVSS 5 MEDIUM

The ms_fnmatch function in Samba 3.0.4 and 3.0.7 and possibly other versions allows remote authenticated users to cause a denial of service (CPU consumption) via a SAMBA request that contains multiple * (wildcard) characters.

EPSS 4.91% · 92.1th percentile

Risk Scores

CVSS 2.0

EPSS Score

4.91%

92.1th percentile

Affected Products

Vendor	Product	Versions
redhat	fedora_core	core_2.0, *
gentoo	linux
sgi	samba	3.0.3, 3.0.4, 3.0.5
redhat	enterprise_linux_desktop	3.0
redhat	enterprise_linux	3.0, 2.1
redhat	linux_advanced_workstation	2.1, 2.1
n/a	n/a	*
conectiva	linux	10.0
samba	samba	3.0.3, 3.0.5, 3.0.0

Timeline

CVE Published
Feb 4, 2022 EPSS Score
May 21, 2022 EPSS Score
Jul 13, 2022 EPSS Score
Oct 28, 2022 EPSS Score
Dec 20, 2022 EPSS Score
Mar 7, 2023 EPSS Score
Apr 5, 2023 EPSS Score
Jul 20, 2023 EPSS Score
Sep 11, 2023 EPSS Score
Nov 3, 2023 EPSS Score
Dec 26, 2023 EPSS Score

References

samba-msfnmatch-dos(17987) vdb
20041108 Samba SMBD Remote Denial of Service Vulnerability third-party-advisory
USN-22-1 vendor-advisory
APPLE-SA-2005-03-21 vendor-advisory
11624 vdb
https://nvd.nist.gov/vuln/detail/CVE-2004-0930 advisory
https://www.ubuntu.com/usn/usn-22-1 url
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000899 url
http://marc.info/?l=bugtraq&m=109993720717957&w=2 url
http://sunsolve.sun.com/search/document.do?assetkey=1-26-101783-1 url
ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.17/SCOSA-2005.17.txt technical
ftp://patches.sgi.com/support/free/security/advisories/20041201-01-P technical
http://www.gentoo.org/security/en/glsa/glsa-200411-21.xml technical
http://www.mandriva.com/security/advisories?name=MDKSA-2004:131 technical
http://www.novell.com/linux/security/advisories/2004_40_samba.html technical
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10936 technical
http://marc.info/?l=bugtraq&m=110330519803655&w=2 technical

Open in Interactive Console →