Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

samba samba 3.0.1 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2004-0082
The mksmbpasswd shell script (mksmbpasswd.sh) in Samba 3.0.0 and 3.0.1, when creating an account but marking it as disabled, may overwrite the user password with an uninitialized buffer, which could enable the account with a more easily guessable password.
Samba Samba 3.0.1Samba Samba 3.0.0
NA
CVE-2004-0808
The process_logon_packet function in the nmbd server for Samba 3.0.6 and previous versions, when domain logons are enabled, allows remote malicious users to cause a denial of service via a SAM_UAS_CHANGE request with a length value that is larger than the number of structures tha...
Samba Samba 3.0.4Samba Samba 3.0.2aSamba Samba 3.0.3Samba Samba 3.0.0Samba Samba 3.0.5Samba Samba 3.0.6Samba Samba 3.0.1Samba Samba 3.0.2
NA
CVE-2004-0815
The unix_clean_name function in Samba 2.2.x up to and including 2.2.11, and 3.0.x prior to 3.0.2a, trims certain directory names down to absolute paths, which could allow remote malicious users to bypass the specified share restrictions and read, write, or list arbitrary files vi...
Samba Samba 2.2.0Samba Samba 2.2.5Samba Samba 2.2.6Samba Samba 3.0.0Samba Samba 2.2.0aSamba Samba 2.2.11Samba Samba 2.2.1aSamba Samba 2.2.7Samba Samba 2.2.7aSamba Samba 3.0.1Samba Samba 3.0.2Samba Samba 2.2.2Samba Samba 2.2.3Samba Samba 2.2.8Samba Samba 2.2.8aSamba Samba 3.0.2aSamba Samba 2.2.3aSamba Samba 2.2.4Samba Samba 2.2.9Samba Samba 2.2a
NA
CVE-2004-0807
Samba 3.0.6 and previous versions allows remote malicious users to cause a denial of service (infinite loop and memory exhaustion) via certain malformed requests that cause new processes to be spawned and enter an infinite loop.
Samba Samba 3.0.1Samba Samba 3.0.2Sgi Samba 3.0.2Sgi Samba 3.0.3Samba Samba 3.0.0Samba Samba 3.0.6Sgi Samba 3.0.1Conectiva Linux 10.0Conectiva Linux 9.0Samba Samba 3.0.2aSamba Samba 3.0.3Samba Samba 3.0.4Sgi Samba 3.0.4Sgi Samba 3.0.5Samba Samba 3.0.5Sgi Samba 3.0.6Sgi Samba 3.0Mandrakesoft Mandrake Linux 10.0Suse Suse Linux 9.0Suse Suse Linux 9.1Suse Suse Linux 8.1Suse Suse Linux 8.2
NA
CVE-2011-1097
rsync 3.x prior to 3.0.8, when certain recursion, deletion, and ownership options are used, allows remote rsync servers to cause a denial of service (heap memory corruption and application crash) or possibly execute arbitrary code via malformed data.
Samba Rsync 3.0.5Samba Rsync 3.0.0Samba Rsync 3.0.3Samba Rsync 3.0.2Samba Rsync 3.0.7Samba Rsync 3.0.4Samba Rsync 3.0.1Samba Rsync 3.0.6
NA
CVE-2004-2546
Multiple memory leaks in Samba prior to 3.0.6 allow malicious users to cause a denial of service (memory consumption).
Samba Samba 1.9.17Samba Samba 1.9.18Samba Samba 2.2.1Samba Samba 2.2.10Samba Samba 2.2.9Samba Samba 2.2aSamba Samba 3.0.4Samba Samba 3.0.5Samba Samba 2.0Samba Samba 2.2.1aSamba Samba 2.2.3aSamba Samba 3.0.1Samba Samba 3.0.2Samba Samba 2.0.0Samba Samba 2.0.5aSamba Samba 2.2.7aSamba Samba 2.2.8aSamba Samba 3.0.2aSamba Samba 3.0.3Samba Samba 2.2.11Samba Samba 2.2.12Samba Samba 3.0.0
NA
CVE-2006-3403
The smdb daemon (smbd/service.c) in Samba 3.0.1 up to and including 3.0.22 allows remote malicious users to cause a denial of service (memory consumption) via a large number of share connection requests.
Samba Samba 3.0.13Samba Samba 3.0.14Samba Samba 3.0.2Samba Samba 3.0.20aSamba Samba 3.0.3Samba Samba 3.0.4Samba Samba 3.0.1Samba Samba 3.0.10Samba Samba 3.0.16Samba Samba 3.0.17Samba Samba 3.0.21aSamba Samba 3.0.21bSamba Samba 3.0.8Samba Samba 3.0.9Samba Samba 3.0.14aSamba Samba 3.0.15Samba Samba 3.0.20bSamba Samba 3.0.21Samba Samba 3.0.5Samba Samba 3.0.6Samba Samba 3.0.7Samba Samba 3.0.11
NA
CVE-2007-2446
Multiple heap-based buffer overflows in the NDR parsing in smbd in Samba 3.0.0 up to and including 3.0.25rc3 allow remote malicious users to execute arbitrary code via crafted MS-RPC requests involving (1) DFSEnum (netdfs_io_dfs_EnumInfo_d), (2) RFNPCNEX (smb_io_notify_option_typ...
Samba Samba 3.0.14Samba Samba 3.0.14aSamba Samba 3.0.20aSamba Samba 3.0.20bSamba Samba 3.0.23aSamba Samba 3.0.23bSamba Samba 3.0.25Samba Samba 3.0.0Samba Samba 3.0.1Samba Samba 3.0.15Samba Samba 3.0.16Samba Samba 3.0.21Samba Samba 3.0.21aSamba Samba 3.0.23cSamba Samba 3.0.23dSamba Samba 3.0.2aSamba Samba 3.0.12Samba Samba 3.0.13Samba Samba 3.0.2Samba Samba 3.0.20Samba Samba 3.0.22Samba Samba 3.0.23
NA
CVE-2007-2447
The MS-RPC functionality in smbd in Samba 3.0.0 up to and including 3.0.25rc3 allows remote malicious users to execute arbitrary commands via shell metacharacters involving the (1) SamrChangePassword function, when the "username map script" smb.conf option is enabled, a...
Samba Samba 3.0.13Samba Samba 3.0.14Samba Samba 3.0.2Samba Samba 3.0.20Samba Samba 3.0.22Samba Samba 3.0.23Samba Samba 3.0.23aSamba Samba 3.0.25Samba Samba 3.0.6Samba Samba 3.0.7Samba Samba 3.0.0Samba Samba 3.0.14aSamba Samba 3.0.15Samba Samba 3.0.20aSamba Samba 3.0.20bSamba Samba 3.0.23bSamba Samba 3.0.23cSamba Samba 3.0.2aSamba Samba 3.0.8Samba Samba 3.0.9Samba Samba 3.0.11Samba Samba 3.0.12
NA
CVE-2007-4572
Stack-based buffer overflow in nmbd in Samba 3.0.0 up to and including 3.0.26a, when configured as a Primary or Backup Domain controller, allows remote malicious users to have an unknown impact via crafted GETDC mailslot requests, related to handling of GETDC logon server request...
Samba Samba 3.0.11Samba Samba 3.0.12Samba Samba 3.0.18Samba Samba 3.0.19Samba Samba 3.0.21cSamba Samba 3.0.22Samba Samba 3.0.25Samba Samba 3.0.25cSamba Samba 3.0.26Samba Samba 3.0.26aSamba Samba 3.0.7Samba Samba 3.0.8Samba Samba 3.0.0Samba Samba 3.0.14aSamba Samba 3.0.15Samba Samba 3.0.20bSamba Samba 3.0.21Samba Samba 3.0.23bSamba Samba 3.0.23cSamba Samba 3.0.4Samba Samba 3.0.1Samba Samba 3.0.10
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook