Published: 10/01/2005 Updated: 11/10/2017

CVSS v2 Base Score: 6.4 | Impact Score: 4.9 | Exploitability Score: 10

VMScore: 570

Vector: AV:N/AC:L/Au:N/C:P/I:N/A:P

Multiple vulnerabilities in the samba filesystem (smbfs) in Linux kernel 2.4 and 2.6 allow remote samba servers to cause a denial of service (crash) or gain sensitive information from kernel memory via a samba server (1) returning more data than requested to the smb_proc_read function, (2) returning a data offset from outside the samba packet to the smb_proc_readX function, (3) sending a certain TRANS2 fragmented packet to the smb_receive_trans2 function, (4) sending a samba packet with a certain header size to the smb_proc_readX_data function, or (5) sending a certain packet based offset for the data in a packet to the smb_receive_trans2 function.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel 2.4.0
linux linux kernel 2.4.15
linux linux kernel 2.4.16
linux linux kernel 2.4.17
linux linux kernel 2.4.18
linux linux kernel 2.4.11
linux linux kernel 2.4.12
linux linux kernel 2.4.19
linux linux kernel 2.4.20
linux linux kernel 2.4.21
linux linux kernel 2.4.24
linux linux kernel 2.4.24_ow1
linux linux kernel 2.4.27
linux linux kernel 2.4.9
linux linux kernel 2.6.0
linux linux kernel 2.6.3
linux linux kernel 2.6.4
linux linux kernel 2.6.8
redhat enterprise linux 2.1
redhat linux advanced workstation 2.1
linux linux kernel 2.4.22
linux linux kernel 2.4.23
linux linux kernel 2.4.5
linux linux kernel 2.4.6
linux linux kernel 2.6.1
linux linux kernel 2.6.6
linux linux kernel 2.6.7
redhat enterprise linux 3.0
redhat enterprise linux desktop 3.0
suse suse linux 8.2
suse suse linux 8
trustix secure linux 2.1
trustix secure linux 2.2
linux linux kernel 2.4.1
linux linux kernel 2.4.10
linux linux kernel 2.4.2
linux linux kernel 2.4.23_ow2
linux linux kernel 2.4.7
linux linux kernel 2.4.8
linux linux kernel 2.6.2
redhat fedora core core_2.0
redhat fedora core core_3.0
suse suse linux 9.0
ubuntu ubuntu linux 4.1
suse suse linux 9.1
suse suse linux 9.2
linux linux kernel 2.4.13
linux linux kernel 2.4.14
linux linux kernel 2.4.25
linux linux kernel 2.4.26
linux linux kernel 2.4.3
linux linux kernel 2.4.4
linux linux kernel 2.6.5
linux linux kernel 2.6.9
linux linux kernel 2.6_test9_cvs
suse suse linux 1.0
suse suse linux 8.1
trustix secure linux 1.5
trustix secure linux 2.0

CAN-2004-0883, CAN-2004-0949: ...

Synopsis kernel security update Type/Severity Security Advisory: Important Topic Updated kernel packages that fix several security issues in Red HatEnterprise Linux 3 are now available Description The Linux kernel handles the basic functions of the operating systemThis update includes fix ...

Synopsis Updated kernel packages fix security vulnerability Type/Severity Security Advisory: Important Topic Updated kernel packages are now available as part of ongoingsupport and maintenance of Red Hat Enterprise Linux version21 This is the sixth regular update Description The Linux ke ...

Synopsis Updated Itanium kernel packages resolve security issues Type/Severity Security Advisory: Important Topic Updated Itanium kernel packages are now available as part of ongoingsupport and maintenance of Red Hat Enterprise Linux version 21 This isthe sixth regular update Description ...

Several local and remote vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or the execution of arbitrary code The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2004-0427 A local denial of service vulnerability in do_fork() has been found CVE-2005-0489 A ...

NVD-CWE-Other http://www.securityfocus.com/bid/11695 http://www.redhat.com/support/errata/RHSA-2004-537.html http://security.e-matters.de/advisories/142004.html https://bugzilla.fedora.us/show_bug.cgi?id=2336 http://secunia.com/advisories/13232/http://www.kb.cert.org/vuls/id/726198 http://www.debian.org/security/2006/dsa-1070 http://www.debian.org/security/2006/dsa-1067 http://www.debian.org/security/2006/dsa-1069 http://secunia.com/advisories/20162 http://secunia.com/advisories/20163 http://www.redhat.com/support/errata/RHSA-2004-504.html http://www.redhat.com/support/errata/RHSA-2004-505.html http://secunia.com/advisories/20202 http://www.debian.org/security/2006/dsa-1082 http://secunia.com/advisories/20338 http://www.mandriva.com/security/advisories?name=MDKSA-2005:022 http://marc.info/?l=bugtraq&m=110082989725345&w=2 http://marc.info/?l=bugtraq&m=110072140811965&w=2 https://exchange.xforce.ibmcloud.com/vulnerabilities/18136 https://exchange.xforce.ibmcloud.com/vulnerabilities/18135 https://exchange.xforce.ibmcloud.com/vulnerabilities/18134 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10330 https://usn.ubuntu.com/30-1/https://nvd.nist.gov https://www.kb.cert.org/vuls/id/726198

CVE-2004-0883

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect