Samba

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2004-0808 1Samba 1Samba Apr 16, 2026 Dec 31, 2004 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The process_logon_packet function in the nmbd server for Samba 3.0.6 and earlier, when domain logons are enabled, allows remote attackers to cause a denial of service via a SAM_UAS_CHANGE request with a length value that...Show more The process_logon_packet function in the nmbd server for Samba 3.0.6 and earlier, when domain logons are enabled, allows remote attackers to cause a denial of service via a SAM_UAS_CHANGE request with a length value that is larger than the number of structures that are provided.Show less
CVE-2004-0815 1Samba 1Samba Apr 16, 2026 Nov 3, 2004 N/A· v4 N/A· v3 7.5 HIGH· v2 The unix_clean_name function in Samba 2.2.x through 2.2.11, and 3.0.x before 3.0.2a, trims certain directory names down to absolute paths, which could allow remote attackers to bypass the specified share restrictions and...Show more The unix_clean_name function in Samba 2.2.x through 2.2.11, and 3.0.x before 3.0.2a, trims certain directory names down to absolute paths, which could allow remote attackers to bypass the specified share restrictions and read, write, or list arbitrary files via "/.////" style sequences in pathnames.Show less
CVE-2004-0807 5Conectiva MandrakesoftSamba+2 more 5Linux Mandrake LinuxSamba+2 more Apr 16, 2026 Sep 13, 2004 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Samba 3.0.6 and earlier allows remote attackers to cause a denial of service (infinite loop and memory exhaustion) via certain malformed requests that cause new processes to be spawned and enter an infinite loop.
CVE-2004-0686 2Samba Trustix 2Samba Secure Linux Apr 16, 2026 Jul 27, 2004 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Buffer overflow in Samba 2.2.x to 2.2.9, and 3.0.0 to 3.0.4, when the "mangling method = hash" option is enabled in smb.conf, has unknown impact and attack vectors.
CVE-2004-0600 2Samba Trustix 2Samba Secure Linux Apr 16, 2026 Jul 27, 2004 N/A· v4 N/A· v3 10.0 HIGH· v2 Buffer overflow in the Samba Web Administration Tool (SWAT) in Samba 3.0.2 to 3.0.4 allows remote attackers to execute arbitrary code via an invalid base-64 character during HTTP basic authentication.
CVE-2004-0186 2Linux Samba 2Linux Kernel Samba Apr 16, 2026 Mar 15, 2004 N/A· v4 N/A· v3 7.2 HIGH· v2 smbmnt in Samba 2.x and 3.x on Linux 2.6, when installed setuid, allows local users to gain root privileges by mounting a Samba share that contains a setuid root program, whose setuid attributes are not cleared when the...Show more smbmnt in Samba 2.x and 3.x on Linux 2.6, when installed setuid, allows local users to gain root privileges by mounting a Samba share that contains a setuid root program, whose setuid attributes are not cleared when the share is mounted.Show less
CVE-2004-0082 1Samba 1Samba Apr 16, 2026 Mar 3, 2004 N/A· v4 N/A· v3 7.5 HIGH· v2 The mksmbpasswd shell script (mksmbpasswd.sh) in Samba 3.0.0 and 3.0.1, when creating an account but marking it as disabled, may overwrite the user password with an uninitialized buffer, which could enable the account wi...Show more The mksmbpasswd shell script (mksmbpasswd.sh) in Samba 3.0.0 and 3.0.1, when creating an account but marking it as disabled, may overwrite the user password with an uninitialized buffer, which could enable the account with a more easily guessable password.Show less
CVE-2004-0028 1Samba 1Jitterbug Apr 16, 2026 Feb 3, 2004 N/A· v4 N/A· v3 7.5 HIGH· v2 jitterbug 1.6.2 does not properly sanitize inputs, which allows remote authenticated users to execute arbitrary commands.
CVE-2003-1332 1Samba 1Samba Apr 16, 2026 Dec 31, 2003 N/A· v4 N/A· v3 7.5 HIGH· v2 Stack-based buffer overflow in the reply_nttrans function in Samba 2.2.7a and earlier allows remote attackers to execute arbitrary code via a crafted request, a different vulnerability than CVE-2003-0201.
CVE-2003-0201 6Apple CompaqHp+3 more 8Cifs 9000 Server Hp UxMac Os X+5 more Apr 16, 2026 May 5, 2003 N/A· v4 N/A· v3 10.0 HIGH· v2 Buffer overflow in the call_trans2open function in trans2.c for Samba 2.2.x before 2.2.8a, 2.0.10 and earlier 2.0.x versions, and Samba-TNG before 0.3.2, allows remote attackers to execute arbitrary code.
CVE-2003-0196 5Compaq HpSamba+2 more 7Cifs 9000 Server Hp UxSamba+4 more Apr 16, 2026 May 5, 2003 N/A· v4 N/A· v3 10.0 HIGH· v2 Multiple buffer overflows in Samba before 2.2.8a may allow remote attackers to execute arbitrary code or cause a denial of service, as discovered by the Samba team and a different vulnerability than CVE-2003-0201.
CVE-2003-0086 1Samba 1Samba Apr 16, 2026 Mar 31, 2003 N/A· v4 N/A· v3 1.2 LOW· v2 The code for writing reg files in Samba before 2.2.8 allows local users to overwrite arbitrary files via a race condition involving chown.
CVE-2003-0085 2Hp Samba 2Cifs 9000 Server Samba Apr 16, 2026 Mar 31, 2003 N/A· v4 N/A· v3 10.0 HIGH· v2 Buffer overflow in the SMB/CIFS packet fragment re-assembly code for SMB daemon (smbd) in Samba before 2.2.8, and Samba-TNG before 0.3.1, allows remote attackers to execute arbitrary code.
CVE-2002-2196 1Samba 1Samba Apr 16, 2026 Dec 31, 2002 N/A· v4 N/A· v3 7.5 HIGH· v2 Samba before 2.2.5 does not properly terminate the enum_csc_policy data structure, which may allow remote attackers to execute arbitrary code via a buffer overflow attack.
CVE-2002-1318 3Hp SambaSgi 3Cifs 9000 Server IrixSamba Apr 16, 2026 Dec 11, 2002 N/A· v4 N/A· v3 10.0 HIGH· v2 Buffer overflow in samba 2.2.2 through 2.2.6 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an encrypted password that causes the overflow during decryption in which a DOS co...Show more Buffer overflow in samba 2.2.2 through 2.2.6 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an encrypted password that causes the overflow during decryption in which a DOS codepage string is converted to a little-endian UCS2 unicode string.Show less
CVE-2002-0080 2Redhat Samba 2Linux Rsync Apr 16, 2026 Mar 15, 2002 N/A· v4 N/A· v3 2.1 LOW· v2 rsync, when running in daemon mode, does not properly call setgroups before dropping privileges, which could provide supplemental group privileges to local users, who could then read certain files that would otherwise be...Show more rsync, when running in daemon mode, does not properly call setgroups before dropping privileges, which could provide supplemental group privileges to local users, who could then read certain files that would otherwise be disallowed.Show less
CVE-2001-0406 1Samba 1Samba Apr 16, 2026 Jul 2, 2001 N/A· v4 N/A· v3 2.1 LOW· v2 Samba before 2.2.0 allows local attackers to overwrite arbitrary files via a symlink attack using (1) a printer queue query, (2) the more command in smbclient, or (3) the mput command in smbclient.
CVE-2001-1162 2Hp Samba 2Cifs 9000 Server Samba Apr 16, 2026 Jun 23, 2001 N/A· v4 N/A· v3 10.0 HIGH· v2 Directory traversal vulnerability in the %m macro in the smb.conf configuration file in Samba before 2.2.0a allows remote attackers to overwrite certain files via a .. in a NETBIOS name, which is used as the name for a ....Show more Directory traversal vulnerability in the %m macro in the smb.conf configuration file in Samba before 2.2.0a allows remote attackers to overwrite certain files via a .. in a NETBIOS name, which is used as the name for a .log file.Show less
CVE-2000-0939 1Samba 1Samba Apr 16, 2026 Dec 19, 2000 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Samba Web Administration Tool (SWAT) in Samba 2.0.7 allows remote attackers to cause a denial of service by repeatedly submitting a nonstandard URL in the GET HTTP request and forcing it to restart.
CVE-2000-0938 1Samba 1Samba Apr 16, 2026 Dec 19, 2000 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Samba Web Administration Tool (SWAT) in Samba 2.0.7 supplies a different error message when a valid username is provided versus an invalid name, which allows remote attackers to identify valid users on the server.

Previous 1...9 10 111213 Next