CVE-2004-0808
published 2004-12-31CVE-2004-0808: The process_logon_packet function in the nmbd server for Samba 3.0.6 and earlier, when domain logons are enabled, allows remote attackers to cause a denial of…
PriorityP419medium5CVSS 2.0
AVNACLAuNCNINAP
EPSS
5.36%
91.8th percentile
The process_logon_packet function in the nmbd server for Samba 3.0.6 and earlier, when domain logons are enabled, allows remote attackers to cause a denial of service via a SAM_UAS_CHANGE request with a length value that is larger than the number of structures that are provided.
Affected
13 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | samba | < samba 3.0.7 (bookworm) | samba 3.0.7 (bookworm) |
| samba | samba | — | — |
| samba | samba | — | — |
| samba | samba | — | — |
| samba | samba | — | — |
| samba | samba | — | — |
| samba | samba | — | — |
| samba | samba | — | — |
| samba | samba | — | — |
| samba | samba | >= 0 < 3.0.7 | 3.0.7 |
| samba | samba | >= 0 < 3.0.7 | 3.0.7 |
| samba | samba | >= 0 < 3.0.7 | 3.0.7 |
| samba | samba | >= 0 < 3.0.7 | 3.0.7 |
CVSS provenance
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
osv5.0MEDIUM
vendor_debian5.0MEDIUM
vendor_redhat5.0MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
security flaw
vendor_redhat·2004-09-13·CVSS 5.0
CVE-2004-0808 [MEDIUM] security flaw
security flaw
The process_logon_packet function in the nmbd server for Samba 3.0.6 and earlier, when domain logons are enabled, allows remote attackers to cause a denial of service via a SAM_UAS_CHANGE request with a length value that is larger than the number of structures that are provided.
Debian
CVE-2004-0808: samba - The process_logon_packet function in the nmbd server for Samba 3.0.6 and earlier...
vendor_debian·2004·CVSS 5.0
CVE-2004-0808 [MEDIUM] CVE-2004-0808: samba - The process_logon_packet function in the nmbd server for Samba 3.0.6 and earlier...
The process_logon_packet function in the nmbd server for Samba 3.0.6 and earlier, when domain logons are enabled, allows remote attackers to cause a denial of service via a SAM_UAS_CHANGE request with a length value that is larger than the number of structures that are provided.
Scope: local
bookworm: resolved (fixed in 3.0.7)
bullseye: resolved (fixed in 3.0.7)
forky: resolved (fixed in 3.0.7)
sid: resolved (fixed in 3.0.7)
trixie: resolved (fixed in 3.0.7)
GHSA
GHSA-23gc-7p36-fm6g: The process_logon_packet function in the nmbd server for Samba 3
ghsa_unreviewed·2022-04-29
CVE-2004-0808 [MEDIUM] GHSA-23gc-7p36-fm6g: The process_logon_packet function in the nmbd server for Samba 3
The process_logon_packet function in the nmbd server for Samba 3.0.6 and earlier, when domain logons are enabled, allows remote attackers to cause a denial of service via a SAM_UAS_CHANGE request with a length value that is larger than the number of structures that are provided.
OSV
CVE-2004-0808: The process_logon_packet function in the nmbd server for Samba 3
osv·2004-12-31·CVSS 5.0
CVE-2004-0808 [MEDIUM] CVE-2004-0808: The process_logon_packet function in the nmbd server for Samba 3
The process_logon_packet function in the nmbd server for Samba 3.0.6 and earlier, when domain logons are enabled, allows remote attackers to cause a denial of service via a SAM_UAS_CHANGE request with a length value that is larger than the number of structures that are provided.
No detection rules found.
No public exploits indexed.
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000873http://marc.info/?l=bugtraq&m=109509335230495&w=2http://marc.info/?l=bugtraq&m=109526231623307&w=2http://www.gentoo.org/security/en/glsa/glsa-200409-16.xmlhttp://www.idefense.com/application/poi/display?id=138&type=vulnerabilitieshttp://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:092http://www.redhat.com/support/errata/RHSA-2004-467.htmlhttp://www.trustix.net/errata/2004/0046/https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10344http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000873http://marc.info/?l=bugtraq&m=109509335230495&w=2http://marc.info/?l=bugtraq&m=109526231623307&w=2http://www.gentoo.org/security/en/glsa/glsa-200409-16.xmlhttp://www.idefense.com/application/poi/display?id=138&type=vulnerabilitieshttp://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:092http://www.redhat.com/support/errata/RHSA-2004-467.htmlhttp://www.trustix.net/errata/2004/0046/https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10344
2004-12-31
Published