Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

samba samba 3.0.2a vulnerabilities and exploits

(subscribe to this query)
10
CVSSv2
CVE-2012-1182
The RPC code generator in Samba 3.x prior to 3.4.16, 3.5.x prior to 3.5.14, and 3.6.x prior to 3.6.4 does not implement validation of an array length in a manner consistent with validation of array memory allocation, which allows remote malicious users to execute arbitrary code v...
Samba Samba 3.4.0Samba Samba 3.4.14Samba Samba 3.4.5Samba Samba 3.4.6Samba Samba 3.3.15Samba Samba 3.3.16Samba Samba 3.3.5Samba Samba 3.3.4Samba Samba 3.3.3Samba Samba 3.2.4Samba Samba 3.2.3Samba Samba 3.2.11Samba Samba 3.2.12Samba Samba 3.0.14Samba Samba 3.0.29Samba Samba 3.0.1Samba Samba 3.0.0Samba Samba 3.0.23bSamba Samba 3.0.23cSamba Samba 3.0.21Samba Samba 3.0.21aSamba Samba 3.0.6
10
CVSSv2
CVE-2007-2446
Multiple heap-based buffer overflows in the NDR parsing in smbd in Samba 3.0.0 up to and including 3.0.25rc3 allow remote malicious users to execute arbitrary code via crafted MS-RPC requests involving (1) DFSEnum (netdfs_io_dfs_EnumInfo_d), (2) RFNPCNEX (smb_io_notify_option_typ...
Samba Samba 3.0.14Samba Samba 3.0.14aSamba Samba 3.0.20aSamba Samba 3.0.20bSamba Samba 3.0.23aSamba Samba 3.0.23bSamba Samba 3.0.25Samba Samba 3.0.0Samba Samba 3.0.1Samba Samba 3.0.15Samba Samba 3.0.16Samba Samba 3.0.21Samba Samba 3.0.21aSamba Samba 3.0.23cSamba Samba 3.0.23dSamba Samba 3.0.2aSamba Samba 3.0.12Samba Samba 3.0.13Samba Samba 3.0.2Samba Samba 3.0.20Samba Samba 3.0.22Samba Samba 3.0.23
10
CVSSv2
CVE-2004-0882
Buffer overflow in the QFILEPATHINFO request handler in Samba 3.0.x up to and including 3.0.7 may allow remote malicious users to execute arbitrary code via a TRANSACT2_QFILEPATHINFO request with a small "maximum data bytes" value.
Samba Samba 3.0.0Samba Samba 3.0.5Samba Samba 3.0.6Samba Samba 3.0.2aSamba Samba 3.0.3Samba Samba 3.0.1Samba Samba 3.0.2Samba Samba 3.0.7Conectiva Linux 10.0Samba Samba 3.0.4Redhat Enterprise Linux 2.1Redhat Fedora Core Core 3.0Redhat Linux Advanced Workstation 2.1Redhat Enterprise Linux 3.0Ubuntu Ubuntu Linux 4.1Redhat Enterprise Linux Desktop 3.0Redhat Fedora Core Core 2.0
10
CVSSv2
CVE-2004-1154
Integer overflow in the Samba daemon (smbd) in Samba 2.x and 3.0.x up to and including 3.0.9 allows remote authenticated users to cause a denial of service (application crash) and possibly execute arbitrary code via a Samba request with a large number of security descriptors that...
Samba Samba 2.0.0Samba Samba 2.0.6Samba Samba 2.0.7Samba Samba 2.2.1aSamba Samba 2.2.2Samba Samba 2.2.3Samba Samba 2.2.8Samba Samba 2.2.8aSamba Samba 3.0.2aSamba Samba 3.0.3Samba Samba 2.0.1Samba Samba 2.0.10Samba Samba 2.0.8Samba Samba 2.0.9Samba Samba 2.2.3aSamba Samba 2.2.4Samba Samba 2.2.9Samba Samba 2.2aSamba Samba 3.0.4Samba Samba 2.0.4Samba Samba 2.0.5Samba Samba 2.2.11
10
CVSSv2
CVE-2004-0600
Buffer overflow in the Samba Web Administration Tool (SWAT) in Samba 3.0.2 to 3.0.4 allows remote malicious users to execute arbitrary code via an invalid base-64 character during HTTP basic authentication.
Samba Samba 3.0.2Samba Samba 3.0.2aSamba Samba 3.0.3Samba Samba 3.0.4Trustix Secure Linux 2.0Trustix Secure Linux 2.1Trustix Secure Linux 1.5
9.3
CVSSv2
CVE-2007-6015
Stack-based buffer overflow in the send_mailslot function in nmbd in Samba 3.0.0 up to and including 3.0.27a, when the "domain logons" option is enabled, allows remote malicious users to execute arbitrary code via a GETDC mailslot request composed of a long GETDC string...
Samba Samba 2.0.1Samba Samba 2.0.7Samba Samba 2.0.8Samba Samba 2.2.3Samba Samba 2.2.3aSamba Samba 2.2.8aSamba Samba 2.2.9Samba Samba 3.0.13Samba Samba 3.0.14Samba Samba 3.0.21bSamba Samba 3.0.21cSamba Samba 3.0.25Samba Samba 3.0.25cSamba Samba 3.0.26Samba Samba 2.0.3Samba Samba 2.0.4Samba Samba 2.2.0aSamba Samba 2.2.11Samba Samba 2.2.6Samba Samba 2.2.7Samba Samba 3.0.1Samba Samba 3.0.10
9.3
CVSSv2
CVE-2007-5398
Stack-based buffer overflow in the reply_netbios_packet function in nmbd/nmbd_packets.c in nmbd in Samba 3.0.0 up to and including 3.0.26a, when operating as a WINS server, allows remote malicious users to execute arbitrary code via crafted WINS Name Registration requests followe...
Samba Samba 3.0.1Samba Samba 3.0.10Samba Samba 3.0.16Samba Samba 3.0.17Samba Samba 3.0.21Samba Samba 3.0.21aSamba Samba 3.0.21bSamba Samba 3.0.23dSamba Samba 3.0.24Samba Samba 3.0.25aSamba Samba 3.0.25bSamba Samba 3.0.5Samba Samba 3.0.6Samba Samba 3.0.11Samba Samba 3.0.12Samba Samba 3.0.18Samba Samba 3.0.19Samba Samba 3.0.21cSamba Samba 3.0.22Samba Samba 3.0.25Samba Samba 3.0.25cSamba Samba 3.0.26
9.3
CVSSv2
CVE-2007-4572
Stack-based buffer overflow in nmbd in Samba 3.0.0 up to and including 3.0.26a, when configured as a Primary or Backup Domain controller, allows remote malicious users to have an unknown impact via crafted GETDC mailslot requests, related to handling of GETDC logon server request...
Samba Samba 3.0.11Samba Samba 3.0.12Samba Samba 3.0.18Samba Samba 3.0.19Samba Samba 3.0.21cSamba Samba 3.0.22Samba Samba 3.0.25Samba Samba 3.0.25cSamba Samba 3.0.26Samba Samba 3.0.26aSamba Samba 3.0.7Samba Samba 3.0.8Samba Samba 3.0.0Samba Samba 3.0.14aSamba Samba 3.0.15Samba Samba 3.0.20bSamba Samba 3.0.21Samba Samba 3.0.23bSamba Samba 3.0.23cSamba Samba 3.0.4Samba Samba 3.0.1Samba Samba 3.0.10
7.5
CVSSv2
CVE-2004-0815
The unix_clean_name function in Samba 2.2.x up to and including 2.2.11, and 3.0.x prior to 3.0.2a, trims certain directory names down to absolute paths, which could allow remote malicious users to bypass the specified share restrictions and read, write, or list arbitrary files vi...
Samba Samba 2.2.0Samba Samba 2.2.5Samba Samba 2.2.6Samba Samba 3.0.0Samba Samba 2.2.0aSamba Samba 2.2.11Samba Samba 2.2.1aSamba Samba 2.2.7Samba Samba 2.2.7aSamba Samba 3.0.1Samba Samba 3.0.2Samba Samba 2.2.2Samba Samba 2.2.3Samba Samba 2.2.8Samba Samba 2.2.8aSamba Samba 3.0.2aSamba Samba 2.2.3aSamba Samba 2.2.4Samba Samba 2.2.9Samba Samba 2.2a
6.4
CVSSv2
CVE-2004-2546
Multiple memory leaks in Samba prior to 3.0.6 allow malicious users to cause a denial of service (memory consumption).
Samba Samba 1.9.17Samba Samba 1.9.18Samba Samba 2.2.1Samba Samba 2.2.10Samba Samba 2.2.9Samba Samba 2.2aSamba Samba 3.0.4Samba Samba 3.0.5Samba Samba 2.0Samba Samba 2.2.1aSamba Samba 2.2.3aSamba Samba 3.0.1Samba Samba 3.0.2Samba Samba 2.0.0Samba Samba 2.0.5aSamba Samba 2.2.7aSamba Samba 2.2.8aSamba Samba 3.0.2aSamba Samba 3.0.3Samba Samba 2.2.11Samba Samba 2.2.12Samba Samba 3.0.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48654CVE-2024-2757authentication bypassCVE-2024-3194CVE-2024-33640CVE-2024-21111dosinsecure direct object referenceCVE-2024-21345
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook