CVE-2004-0930
Fixed in a distro release EPSS 5%
The ms_fnmatch function in Samba 3.0.4 and 3.0.7 and possibly other versions allows remote authenticated users to cause a denial of service (CPU consumption) via a SAMBA request that contains multiple * (wildcard) characters.
Products: samba, sgi samba, conectiva linux, gentoo linux, redhat enterprise_linux, redhat enterprise_linux_desktop, redhat fedora_core, redhat linux_advanced_workstation
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | samba | 3.0.8-1 |
| Debian 13 | samba | 3.0.8-1 |
| Debian 14 | samba | 3.0.8-1 |
| Red Hat Enterprise Linux 3 | samba | 0:3.0.7-1.3E.1 |
| Red Hat Enterprise Linux 3 | samba-client | 0:3.0.7-1.3E.1 |
| Red Hat Enterprise Linux 3 | samba-common | 0:3.0.7-1.3E.1 |
| Red Hat Enterprise Linux 3 | samba-debuginfo | 0:3.0.7-1.3E.1 |
| Red Hat Enterprise Linux 3 | samba-swat | 0:3.0.7-1.3E.1 |