CVE-2004-0807

7 documents7 sources
Severity
5.0MEDIUM
EPSS
9.8%
top 7.02%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
5
Conectiva LinuxMandrakesoft Mandrake LinuxSamba Samba+2 more
Timeline
PublishedSep 13
Latest updateMay 3

Description

Samba 3.0.6 and earlier allows remote attackers to cause a denial of service (infinite loop and memory exhaustion) via certain malformed requests that cause new processes to be spawned and enter an infinite loop.

CVSS vector

AV:N/AC:L/C:N/I:N/A:PExploitability: 10.0 | Impact: 2.9

Affected Packages6 packages

▶Debiansamba< 3.0.7+3
▶NVDsgi/samba7 versions+6
▶NVDsamba/samba8 versions+7
▶NVDconectiva/linux10.0, 9.0+1
▶NVDsuse/suse_linux5 versions+4

Patches

Patch: distro.conectiva.com.br ↗Patch: www.gentoo.org ↗Patch: www.idefense.com ↗

🔴Vulnerability Details

3
GHSA
GHSA-8w98-f339-9fh8: Samba 3↗2022-05-03
▶
CVEList
CVE-2004-0807: Samba 3↗2004-09-14
▶
OSV
CVE-2004-0807: Samba 3↗2004-09-13
▶

📋Vendor Advisories

2
Red Hat
security flaw↗2004-09-13
▶
Debian
CVE-2004-0807: samba - Samba 3.0.6 and earlier allows remote attackers to cause a denial of service (in...↗2004
▶

💬Community

1
Bugzilla
CVE-2004-0807 security flaw↗2018-08-16
▶
CVE-2004-0807 (MEDIUM CVSS 5) | Samba 3.0.6 and earlier allows remo | cvebase.io