PT-2004-1070 · Samba · Samba+1
Stefan Esser
·
Published
2004-11-16
·
Updated
2018-10-30
·
CVE-2004-0882
CVSS v2.0
10
High
| Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Samba versions 3.0.0 through 3.0.7
Samba Server versions 3.0.0 through 3.0.7
Description
The issue is caused by multiple vulnerabilities in the Samba package, which can lead to disruption of confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited remotely. A buffer overflow in the QFILEPATHINFO request handler may allow remote attackers to execute arbitrary code via a TRANSACT2 QFILEPATHINFO request with a small "maximum data bytes" value. Successful exploitation requires a special pathname to exist or the user to have write permissions on a network share.
Recommendations
For Samba versions 3.0.0 through 3.0.7, consider disabling the QFILEPATHINFO request handler until a patch is available.
For Samba Server versions 3.0.0 through 3.0.7, restrict access to network shares to minimize the risk of exploitation.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Samba
Sambar Server