VDB
CVE-2004-1154
CVE-2004-1154
PUBLISHED
CVSS 10 CRITICAL
Integer overflow in the Samba daemon (smbd) in Samba 2.x and 3.0.x through 3.0.9 allows remote authenticated users to cause a denial of service (application crash) and possibly execute arbitrary code via a Samba request with a large number of security descriptors that triggers a heap-based buffer overflow.
EPSS 27.77% · 96.6th percentile
Risk Scores
CVSS 2.0
10
EPSS Score
27.77%
96.6th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| samba | samba | 2.0.6, 3.0.0, 3.0.1 |
| redhat | fedora_core | core_3.0, core_2.0 |
| n/a | n/a | n/a |
| suse | suse_linux | 1.0, 9.1, 9.2 |
| trustix | secure_linux | 2.2, 2.1, 2.0 |
Timeline
- Dec 22, 2004 CVE Published
- Sep 23, 2010 PoC Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- Jul 12, 2022 EPSS Score
- Sep 4, 2022 EPSS Score
- Oct 26, 2022 EPSS Score
- Feb 9, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 3, 2023 EPSS Score
- Apr 13, 2023 EPSS Score
- Jul 17, 2023 EPSS Score
References
- http://www.samba.org/samba/security/CAN-2004-1154.html url
- 101643 vendor-advisory
- oval:org.mitre.oval:def:10236 vdb
- 11973 vdb
- samba-msrpc-heap-corruption(18519) vdb
- RHSA-2005:020 vendor-advisory
- oval:org.mitre.oval:def:642 vdb
- 13453 third-party-advisory
- DSA-701 vendor-advisory
- APPLE-SA-2005-03-21 vendor-advisory
- 57730 vendor-advisory
- 20041216 Samba smbd Security Descriptor Integer Overflow Vulnerability third-party-advisory
- SUSE-SA:2004:045 vendor-advisory
- oval:org.mitre.oval:def:1459 vdb
- SCOSA-2005.17 vendor-advisory
- VU#226184 third-party-advisory
- https://nvd.nist.gov/vuln/detail/CVE-2004-1154 advisory
- http://secunia.com/advisories/13453 url