CVE-2004-0829
published 2004-12-31CVE-2004-0829: smbd in Samba before 2.2.11 allows remote attackers to cause a denial of service (daemon crash) by sending a FindNextPrintChangeNotify request without a…
PriorityP419medium5CVSS 2.0
AVNACLAuNCNINAP
EPSS
3.91%
89.2th percentile
smbd in Samba before 2.2.11 allows remote attackers to cause a denial of service (daemon crash) by sending a FindNextPrintChangeNotify request without a previous FindFirstPrintChangeNotify, as demonstrated by the SMB client in Windows XP SP2.
Affected
30 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | samba | < samba 2.2.11 (bookworm) | samba 2.2.11 (bookworm) |
| samba | samba | — | — |
| samba | samba | — | — |
| samba | samba | — | — |
| samba | samba | — | — |
| samba | samba | — | — |
| samba | samba | — | — |
| samba | samba | — | — |
| samba | samba | — | — |
| samba | samba | — | — |
| samba | samba | — | — |
| samba | samba | — | — |
| samba | samba | — | — |
| samba | samba | — | — |
| samba | samba | — | — |
| samba | samba | — | — |
| samba | samba | — | — |
| samba | samba | — | — |
| samba | samba | — | — |
| samba | samba | — | — |
| samba | samba | — | — |
| samba | samba | — | — |
| samba | samba | — | — |
| samba | samba | — | — |
| samba | samba | — | — |
CVSS provenance
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
osv5.0MEDIUM
vendor_debian5.0MEDIUM
vendor_redhat5.0MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Debian
CVE-2004-0829: samba - smbd in Samba before 2.2.11 allows remote attackers to cause a denial of service...
vendor_debian·2004·CVSS 5.0
CVE-2004-0829 [MEDIUM] CVE-2004-0829: samba - smbd in Samba before 2.2.11 allows remote attackers to cause a denial of service...
smbd in Samba before 2.2.11 allows remote attackers to cause a denial of service (daemon crash) by sending a FindNextPrintChangeNotify request without a previous FindFirstPrintChangeNotify, as demonstrated by the SMB client in Windows XP SP2.
Scope: local
bookworm: resolved (fixed in 2.2.11)
bullseye: resolved (fixed in 2.2.11)
forky: resolved (fixed in 2.2.11)
sid: resolved (fixed in 2.2.11)
trixie: resolved (fixed in 2.2.11)
Red Hat
CVE-2004-0829: smbd in Samba before 2
vendor_redhat·CVSS 5.0
CVE-2004-0829 [MEDIUM] CVE-2004-0829: smbd in Samba before 2
smbd in Samba before 2.2.11 allows remote attackers to cause a denial of service (daemon crash) by sending a FindNextPrintChangeNotify request without a previous FindFirstPrintChangeNotify, as demonstrated by the SMB client in Windows XP SP2.
Statement: We do not class this as a security issue; this can only cause a denial of service for the attacker.
GHSA
GHSA-xr8x-5cxm-p785: smbd in Samba before 2
ghsa_unreviewed·2022-04-29
CVE-2004-0829 [MEDIUM] GHSA-xr8x-5cxm-p785: smbd in Samba before 2
smbd in Samba before 2.2.11 allows remote attackers to cause a denial of service (daemon crash) by sending a FindNextPrintChangeNotify request without a previous FindFirstPrintChangeNotify, as demonstrated by the SMB client in Windows XP SP2.
OSV
CVE-2004-0829: smbd in Samba before 2
osv·2004-12-31·CVSS 5.0
CVE-2004-0829 [MEDIUM] CVE-2004-0829: smbd in Samba before 2
smbd in Samba before 2.2.11 allows remote attackers to cause a denial of service (daemon crash) by sending a FindNextPrintChangeNotify request without a previous FindFirstPrintChangeNotify, as demonstrated by the SMB client in Windows XP SP2.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://samba.org/samba/history/samba-2.2.11.htmlhttp://seclists.org/lists/bugtraq/2004/Sep/0003.htmlhttp://www.gentoo.org/security/en/glsa/glsa-200409-14.xmlhttp://www.trustix.org/errata/2004/0043https://exchange.xforce.ibmcloud.com/vulnerabilities/17138http://samba.org/samba/history/samba-2.2.11.htmlhttp://seclists.org/lists/bugtraq/2004/Sep/0003.htmlhttp://www.gentoo.org/security/en/glsa/glsa-200409-14.xmlhttp://www.trustix.org/errata/2004/0043https://exchange.xforce.ibmcloud.com/vulnerabilities/17138
2004-12-31
Published