PT-2004-1873 · Samba · Samba

Publicado 2004-09-14 · Atualizado 2018-10-30 · CVE-2004-0808

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Samba versions 3.0.6 and earlier

Description The issue is a denial of service flaw that occurs when the process logon packet function in the nmbd server does not properly validate the size of a UDP packet. This happens when an attacker sends a malformed packet with a SAM UAS CHANGE request, claiming a large number of structures but containing a smaller number, causing the daemon to reference memory outside of the packet and possibly crash. This results in a loss of availability for Samba's nmbd daemon.

Recommendations For Samba versions 3.0.6 and earlier, consider disabling the process logon packet function or restricting the handling of SAM UAS CHANGE requests until a fix is available. Additionally, ensure proper validation of packet sizes to prevent the daemon from referencing memory outside of the packet. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2004-0808

RHSA-2004:467

Produtos afetados

Samba

Referências · 15

• http://gentoo.org/security/en/glsa/glsa-200409-16.xml · Aviso do Fabricante
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10344 · Nota
• http://marc.info/?l=bugtraq&m=109509335230495&w=2 · Nota
• http://marc.theaimsgroup.com/?l=bugtraq&m=109509335230495&w=2 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2004-0808 · Aviso do Fabricante
• http://mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:092 · Aviso do Fabricante
• http://marc.theaimsgroup.com/?l=bugtraq&m=109526231623307&w=2 · Nota
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000873 · Correção, Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2004-0808 · Aviso do Fabricante
• http://idefense.com/application/poi/display?id=138&type=vulnerabilities · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2004-0808 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=109526231623307&w=2 · Nota
• https://security-tracker.debian.org/tracker/CVE-2004-0808 · Aviso do Fabricante
• http://trustix.net/errata/2004/0046 · Aviso do Fabricante
• http://redhat.com/support/errata/RHSA-2004-467.html · Aviso do Fabricante