CVE-2004-0882

EPSS 13.73%
Veröffentlicht 27.01.2005 05:00:00
Zuletzt bearbeitet 16.06.2026 22:06:35
Erkennungen
Login

Buffer overflow in the QFILEPATHINFO request handler in Samba 3.0.x through 3.0.7 may allow remote attackers to execute arbitrary code via a TRANSACT2_QFILEPATHINFO request with a small "maximum data bytes" value.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 20

NVD 27 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Samba ≫ Samba Version 3.0.0

Samba ≫ Samba Version 3.0.1

Samba ≫ Samba Version 3.0.2

Samba ≫ Samba Version 3.0.2a

Samba ≫ Samba Version 3.0.3

Samba ≫ Samba Version 3.0.4

Samba ≫ Samba Version 3.0.4 Update rc1

Samba ≫ Samba Version 3.0.5

Samba ≫ Samba Version 3.0.6

Samba ≫ Samba Version 3.0.7

Conectiva ≫ Linux Version 10.0

Redhat ≫ Enterprise Linux Version 2.1 Edition advanced_server

Redhat ≫ Enterprise Linux Version 2.1 Edition advanced_server_ia64

Redhat ≫ Enterprise Linux Version 2.1 Edition enterprise_server

Redhat ≫ Enterprise Linux Version 2.1 Edition enterprise_server_ia64

Redhat ≫ Enterprise Linux Version 2.1 Edition workstation

Redhat ≫ Enterprise Linux Version 2.1 Edition workstation_ia64

Redhat ≫ Enterprise Linux Version 3.0 Edition advanced_server

Redhat ≫ Enterprise Linux Version 3.0 Edition enterprise_server

Redhat ≫ Enterprise Linux Version 3.0 Edition workstation_server

Redhat ≫ Enterprise Linux Desktop Version 3.0

Redhat ≫ Fedora Core Version core_2.0

Redhat ≫ Fedora Core Version core_3.0

Redhat ≫ Linux Advanced Workstation Version 2.1 Edition ia64

Redhat ≫ Linux Advanced Workstation Version 2.1 Edition itanium_processor

Ubuntu ≫ Ubuntu Linux Version 4.1 Edition ia64

Ubuntu ≫ Ubuntu Linux Version 4.1 Edition ppc

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	13.73%	0.96

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	10	10	10	AV:N/AC:L/Au:N/C:C/I:C/A:C

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://lists.apple.com/archives/security-announce/2005/Mar/msg00000.html

ftp://patches.sgi.com/support/free/security/advisories/20041201-01-P

ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.17/SCOSA-2005.17.txt

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000899

http://marc.info/?l=bugtraq&m=110054671403755&w=2

http://marc.info/?l=bugtraq&m=110055646329581&w=2

http://marc.info/?l=bugtraq&m=110330519803655&w=2

http://secunia.com/advisories/13189

http://security.e-matters.de/advisories/132004.html

http://securitytracker.com/id?1012235

http://www.ciac.org/ciac/bulletins/p-038.shtml

http://www.kb.cert.org/vuls/id/457622

US Government Resource

http://www.novell.com/linux/security/advisories/2004_40_samba.html

http://www.osvdb.org/11782

http://www.trustix.net/errata/2004/0058/

Patch

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/18070

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9969

https://nvd.nist.gov/vuln/detail/CVE-2004-0882

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2004-0882

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2004-0882

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2004-0882