CVE-2004-1154 | Vulnetix

CVE-2004-1154 PUBLISHED CVSS 10 CRITICAL

Integer overflow in the Samba daemon (smbd) in Samba 2.x and 3.0.x through 3.0.9 allows remote authenticated users to cause a denial of service (application crash) and possibly execute arbitrary code via a Samba request with a large number of security descriptors that triggers a heap-based buffer overflow.

EPSS 13.20% · 96.3th percentile

Risk Scores

CVSS 2.0

EPSS Score

13.20%

96.3th percentile

Affected Products

Vendor	Product	Versions
samba	samba	2.0.6, 3.0.0, 3.0.1
redhat	fedora_core	core_3.0, core_2.0
n/a	n/a	n/a
suse	suse_linux	1.0, 9.1, 9.2
trustix	secure_linux	2.2, 2.1, 2.0

Timeline

CVE Published
Sep 23, 2010 PoC Published
Feb 4, 2022 EPSS Score
Mar 29, 2022 EPSS Score
Jul 12, 2022 EPSS Score
Sep 4, 2022 EPSS Score
Oct 27, 2022 EPSS Score
Feb 10, 2023 EPSS Score
Mar 7, 2023 EPSS Score
Apr 3, 2023 EPSS Score
May 26, 2023 EPSS Score
Jul 18, 2023 EPSS Score

References

11973 vdb
APPLE-SA-2005-03-21 vendor-advisory
101643 vendor-advisory
13453 third-party-advisory
57730 vendor-advisory
20041216 Samba smbd Security Descriptor Integer Overflow Vulnerability third-party-advisory
https://nvd.nist.gov/vuln/detail/CVE-2004-1154 advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10236 url
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A642 url
http://secunia.com/advisories/13453 url
http://www.debian.org/security/2005/dsa-701 url
http://www.kb.cert.org/vuls/id/226184 url
http://www.samba.org/samba/security/CAN-2004-1154.html technical
ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.17/SCOSA-2005.17.txt technical
http://www.novell.com/linux/security/advisories/2004_45_samba.html technical
http://www.redhat.com/support/errata/RHSA-2005-020.html technical
https://exchange.xforce.ibmcloud.com/vulnerabilities/18519 technical
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1459 technical

Open in Interactive Console →