Free and open-source vulnerability scanner
Mageni eases for you the vulnerability scanning, assessment, and management process. It is free and open-source.
Install NowAvailable for macOS, Windows, and Linux
CVE-2004-0807
CVE information
Published
Last Modified
CVSSv2.0 Severity
Impact Analysis
Description
Samba 3.0.6 and earlier allows remote attackers to cause a denial of service (infinite loop and memory exhaustion) via certain malformed requests that cause new processes to be spawned and enter an infinite loop..
CVSSv2.0 Score
- Severity
- Medium
- Base Score
- 5/10
- Exploit Score
- 10/10
- Access Vector
- Network
- Access Complexity
- Low
- Authentication Required
- None
- Impact Score
- 2.9/10
- Confidentiality Impact
- None
- Availability Impact
- Partial
- Integrity Impact
- None
Products Affected
CPE | Affected | Vulnerable | Excluding | Edit |
---|---|---|---|---|
cpe:2.3:a:samba:samba:3.0.3:*:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:o:conectiva:linux:9.0:*:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:samba:samba:3.0.2a:*:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:samba:samba:3.0.5:*:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:samba:samba:3.0.6:*:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:sgi:samba:3.0.1:*:irix:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:sgi:samba:3.0:*:irix:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:samba:samba:3.0.4:rc1:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:samba:samba:3.0.0:*:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:sgi:samba:3.0.3:*:irix:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:sgi:samba:3.0.4:*:irix:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:sgi:samba:3.0.6:*:irix:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:sgi:samba:3.0.5:*:irix:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:samba:samba:3.0.2:*:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:o:conectiva:linux:10.0:*:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:samba:samba:3.0.4:*:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:samba:samba:3.0.1:*:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:sgi:samba:3.0.2:*:irix:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:o:suse:suse_linux:9.0:*:enterprise_server:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:o:suse:suse_linux:9.0:*:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:o:suse:suse_linux:8.2:*:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:o:suse:suse_linux:8:*:enterprise_server:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:o:suse:suse_linux:9.0:*:x86_64:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:o:suse:suse_linux:9.1:*:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:o:suse:suse_linux:8.1:*:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:amd64:*:*:*:*:* |
Yes
|
- | - |
References
- http://www.idefense.com/application/poi/display?id=139&type=vulnerabilities
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000873
- http://www.gentoo.org/security/en/glsa/glsa-200409-16.xml
- http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:092
- http://www.redhat.com/support/errata/RHSA-2004-467.html
- ftp://patches.sgi.com/support/free/security/advisories/20041201-01-P
- http://www.trustix.net/errata/2004/0046/
- http://marc.info/?l=bugtraq&m=109509335230495&w=2
- http://marc.info/?l=bugtraq&m=109526231623307&w=2
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1