NetSight
IP …
critical10.0

CVE-2004-1154

Integer overflow in the Samba daemon (smbd) in Samba 2.x and 3.0.x through 3.0.9 allows remote authenticated users to cause a denial of service (application cr…

Impact

Integer overflow in the Samba daemon (smbd) in Samba 2.x and 3.0.x through 3.0.9 allows remote authenticated users to cause a denial of service (application crash) and possibly execute arbitrary code via a Samba request with a large number of security descriptors that triggers a heap-based buffer overflow.

Affected products

VendorProductAffected versions
SambaSamba
Versions 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5
RedhatFedora Core
Versions core_2.0, core_3.0
SuseSuse Linux
Versions 1.0, 8.1, 8.2, 9.0, 9.1, 9.2
TrustixSecure Linux
Versions 2.0, 2.1, 2.2

References