← Back

CVE-2004-0882

nvd nist
Published: Jan 27, 2005Modified: Apr 16, 2026

JSON object

Loading...
10.0
Vector
AV:N/AC:L/Au:N/C:C/I:C/A:C
Exploitability: 10.0 / Impact: 10.0
Source: NVD

Description

Buffer overflow in the QFILEPATHINFO request handler in Samba 3.0.x through 3.0.7 may allow remote attackers to execute arbitrary code via a TRANSACT2_QFILEPATHINFO request with a small "maximum data bytes" value.

Affected (27)

Show all products
Conectiva: Linux · Samba: Samba · Redhat: Enterprise Linux, Enterprise Linux Desktop, Fedora Core, Linux Advanced Workstation · Ubuntu: Ubuntu Linux
Conectiva
1 product
Linux
Samba
1 product
Samba
Redhat
4 products
Enterprise Linux
Enterprise Linux Desktop
Fedora Core
Linux Advanced Workstation
Ubuntu
1 product
Ubuntu Linux
Configuration A
11 vulnerable
Vulnerable SoftwareAffected Versions
Linux
Version 10.0
Samba
Samba
Version 3.0.0
Samba
Version 3.0.1
Samba
Version 3.0.2
Samba
Version 3.0.2a
Samba
Version 3.0.3
Samba
Version 3.0.4
Samba
Version 3.0.4 rc1
Samba
Version 3.0.5
Samba
Version 3.0.6
Samba
Version 3.0.7
Configuration B
16 vulnerable
Vulnerable SoftwareAffected Versions
Redhat
Enterprise Linux
Version 2.1
Enterprise Linux
Version 2.1
Enterprise Linux
Version 2.1
Enterprise Linux
Version 2.1
Enterprise Linux
Version 2.1
Enterprise Linux
Version 2.1
Enterprise Linux
Version 3.0
Enterprise Linux
Version 3.0
Enterprise Linux
Version 3.0
Enterprise Linux Desktop
Version 3.0
Redhat
Fedora Core
Version core_2.0
Fedora Core
Version core_3.0
Redhat
Linux Advanced Workstation
Version 2.1
Linux Advanced Workstation
Version 2.1
Ubuntu
Ubuntu Linux
Version 4.1
Ubuntu Linux
Version 4.1

References (34)

ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.17/SCOSA-2005.17.txt (unsafe URL)
Source: cve@mitre.org
ftp://patches.sgi.com/support/free/security/advisories/20041201-01-P (unsafe URL)
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
US Government Resource
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
PatchVendor Advisory
Source: cve@mitre.org
Source: cve@mitre.org
ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.17/SCOSA-2005.17.txt (unsafe URL)
Source: af854a3a-2127-422b-91ae-364da2661108
ftp://patches.sgi.com/support/free/security/advisories/20041201-01-P (unsafe URL)
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
US Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.