CVE-2004-1154
Fixed in a distro release EPSS 13%
Integer overflow in the Samba daemon (smbd) in Samba 2.x and 3.0.x through 3.0.9 allows remote authenticated users to cause a denial of service (application crash) and possibly execute arbitrary code via a Samba request with a large number of security descriptors that triggers a heap-based buffer overflow.
Products: samba, redhat fedora_core, suse_linux, trustix secure_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | samba | 3.0.10-1 |
| Debian 13 | samba | 3.0.10-1 |
| Debian 14 | samba | 3.0.10-1 |
| Debian 3.0 | samba | 2.2.3a-15 |
| Red Hat Enterprise Linux 3 | samba | 0:3.0.9-1.3E.1 |
| Red Hat Enterprise Linux 3 | samba-client | 0:3.0.9-1.3E.1 |
| Red Hat Enterprise Linux 3 | samba-common | 0:3.0.9-1.3E.1 |
| Red Hat Enterprise Linux 3 | samba-debuginfo | 0:3.0.9-1.3E.1 |
| Red Hat Enterprise Linux 3 | samba-swat | 0:3.0.9-1.3E.1 |