[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

250108

 
 

909

 
 

196064

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2004-0882Date: (C)2005-01-27   (M)2023-12-22


Buffer overflow in the QFILEPATHINFO request handler in Samba 3.0.x through 3.0.7 may allow remote attackers to execute arbitrary code via a TRANSACT2_QFILEPATHINFO request with a small "maximum data bytes" value.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 10.0
Exploit Score: 10.0
Impact Score: 10.0
 
CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality: COMPLETE
Integrity: COMPLETE
Availability: COMPLETE
  
Reference:
SECTRACK-1012235
OSVDB-11782
SECUNIA-13189
2004-0058
http://marc.info/?l=bugtraq&m=110054671403755&w=2
http://marc.info/?l=bugtraq&m=110055646329581&w=2
20041201-01-P
http://marc.info/?l=bugtraq&m=110330519803655&w=2
APPLE-SA-2005-03-21
CLA-2004:899
P-038
SCOSA-2005.17
SUSE-SA:2004:040
VU#457622
http://security.e-matters.de/advisories/132004.html
oval:org.mitre.oval:def:9969
samba-qfilepathinfo-bo(18070)

CPE    12
cpe:/a:samba:samba:3.0.2a
cpe:/a:samba:samba:3.0.7
cpe:/a:samba:samba:3.0.5
cpe:/a:samba:samba:3.0.6
...

© SecPod Technologies