NetSight
IP …
medium6.4

CVE-2004-0949

The smb_recv_trans2 function call in the samba filesystem (smbfs) in Linux kernel 2.4 and 2.6 does not properly handle the re-assembly of fragmented packets co…

Impact

The smb_recv_trans2 function call in the samba filesystem (smbfs) in Linux kernel 2.4 and 2.6 does not properly handle the re-assembly of fragmented packets correctly, which could allow remote samba servers to (1) read arbitrary kernel information or (2) raise a counter value to an arbitrary number by sending the first part of the fragmented packet multiple times.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
Versions 2.4.0, 2.4.1, 2.4.2, 2.4.3, 2.4.4, 2.4.5
RedhatEnterprise Linux
Versions 2.1, 3.0
RedhatEnterprise Linux Desktop
Version 3.0
RedhatFedora Core
Versions core_2.0, core_3.0
RedhatLinux Advanced Workstation
Version 2.1
SuseSuse Linux
Versions 1.0, 8, 8.1, 8.2, 9.0, 9.1
TrustixSecure Linux
Versions 1.5, 2.0, 2.1, 2.2
UbuntuUbuntu Linux
Version 4.1

References