CVE-2008-4314

Published: Dec 1, 2008Modified: Apr 23, 2026

8.5

Vector

AV:N/AC:L/Au:N/C:C/I:N/A:P

Exploitability: 10.0 / Impact: 7.8

Source: NVD

Description

smbd in Samba 3.0.29 through 3.2.4 might allow remote attackers to read arbitrary memory and cause a denial of service via crafted (1) trans, (2) trans2, and (3) nttrans requests, related to a "cut&paste error" that causes an improper bounds check to be performed.

Affected (10)

Products: Samba: Samba

1 product

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Samba Samba	Version 3.0.29
Samba Samba	Version 3.0.30
Samba Samba	Version 3.0.31
Samba Samba	Version 3.0.32
Samba Samba	Version 3.0.33
Samba Samba	Version 3.2.0
Samba Samba	Version 3.2.1
Samba Samba	Version 3.2.2
Samba Samba	Version 3.2.3
Samba Samba	Version 3.2.4

Related CWEs

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (40)

http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00002.html

Source: secalert@redhat.com

http://marc.info/?l=bugtraq&m=125003356619515&w=2

Source: secalert@redhat.com

http://osvdb.org/50230

Source: secalert@redhat.com

http://secunia.com/advisories/32813

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/32919

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/32951

Source: secalert@redhat.com

http://secunia.com/advisories/32968

Source: secalert@redhat.com

http://secunia.com/advisories/36281

Source: secalert@redhat.com

http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.453684

Source: secalert@redhat.com

http://sunsolve.sun.com/search/document.do?assetkey=1-26-249087-1

Source: secalert@redhat.com

http://us1.samba.org/samba/ftp/patches/security/samba-3.0.32-CVE-2008-4314.patch

Source: secalert@redhat.com

http://us1.samba.org/samba/security/CVE-2008-4314.html

Source: secalert@redhat.com

http://www.redhat.com/archives/fedora-package-announce/2008-December/msg00021.html

Source: secalert@redhat.com

http://www.redhat.com/archives/fedora-package-announce/2008-December/msg00141.html

Source: secalert@redhat.com

http://www.securityfocus.com/bid/32494

Source: secalert@redhat.com

http://www.securitytracker.com/id?1021287

Source: secalert@redhat.com

http://www.ubuntu.com/usn/USN-680-1

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2008/3277

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2009/0067

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2009/2245

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00002.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://marc.info/?l=bugtraq&m=125003356619515&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://osvdb.org/50230

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/32813

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/32919

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/32951

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/32968

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/36281

Source: af854a3a-2127-422b-91ae-364da2661108

http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.453684

Source: af854a3a-2127-422b-91ae-364da2661108

http://sunsolve.sun.com/search/document.do?assetkey=1-26-249087-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://us1.samba.org/samba/ftp/patches/security/samba-3.0.32-CVE-2008-4314.patch

Source: af854a3a-2127-422b-91ae-364da2661108

http://us1.samba.org/samba/security/CVE-2008-4314.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/archives/fedora-package-announce/2008-December/msg00021.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/archives/fedora-package-announce/2008-December/msg00141.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/32494

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id?1021287

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-680-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2008/3277

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2009/0067

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2009/2245

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.