PT-2004-1071 · Samba Team+1 · Samba-Swat+4

Published 2004-11-16 · Updated 2017-10-11 · CVE-2004-0930

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Samba versions 3.0.0 through 3.0.7 Samba Server versions 3.0.0 through 3.0.7 samba-swat version 3.0.7 samba-common version 3.0.7 samba-client version 3.0.7

Description The issue is caused by an input validation error within the ms fnmatch() function when matching filenames containing wildcard characters. This can be exploited via multiple specially crafted commands to consume a large amount of CPU resources, potentially causing the server to stop responding entirely. The exploitation can be done remotely.

Recommendations For Samba versions 3.0.0 through 3.0.7, consider disabling the ms fnmatch() function until a patch is available. For Samba Server versions 3.0.0 through 3.0.7, restrict access to the server to minimize the risk of exploitation. For samba-swat, samba-common, and samba-client version 3.0.7, avoid using wildcard characters in filenames until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

BDU:2015-06508

BDU:2015-06513

BDU:2015-06518

BDU:2015-06526

CVE-2004-0930

RHSA-2004:632

Affected Products

Samba

Sambar Server

Samba-Client

Samba-Common

Samba-Swat

References · 26

• 🔥 http://idefense.com/application/poi/display?id=156&type=vulnerabilities&flashstatus=false · Exploit
• ftp://patches.sgi.com/support/free/security/advisories/20041201-01-P · Vendor Advisory
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000899 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-06526 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2004-0930 · Vendor Advisory
• https://ubuntu.com/usn/usn-22-1 · Vendor Advisory
• http://marc.info/?l=bugtraq&m=110330519803655&w=2 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-06513 · Security Note
• http://gentoo.org/security/en/glsa/glsa-200411-21.xml · Vendor Advisory
• http://securityfocus.com/bid/11624 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2004-0930 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDKSA-2004:131 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-06508 · Security Note
• ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.17/SCOSA-2005.17.txt · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-06518 · Security Note