CVE-1999-0182: Buffer Overflow
Samba has a buffer overflow which allows a remote attacker to obtain root access by specifying a long password.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Sambafrom your environment.Uninstall Samba if the service is not required.
- Configuration
Configure Samba to enforce and reject overly long passwords (enforce a maximum accepted password length or enable application-level length checks) to prevent the buffer overflow triggered by long passwords.
Samba max_password_length = reject overly long passwords - Compensating control
Restrict access to Samba services to trusted networks or IPs using firewall rules, network ACLs, or segmentation; block untrusted/external access to SMB services until a vendor fix is available.
- Operational
Because the vulnerability allows remote root compromise, assume potential compromise where exposed. Rotate any credentials that may have been exposed and rebuild or restore affected systems from known-good backups after applying mitigations.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0182?
CVE-1999-0182 is classified as a critical vulnerability due to the potential for remote root access.
How do I fix CVE-1999-0182?
To fix CVE-1999-0182, upgrade Samba to a version newer than 1.9.17.
What systems are affected by CVE-1999-0182?
CVE-1999-0182 affects Samba versions up to and including 1.9.17.
What type of attack is possible with CVE-1999-0182?
CVE-1999-0182 allows remote attackers to execute arbitrary code through a buffer overflow.
How can I determine if my system is vulnerable to CVE-1999-0182?
You can determine vulnerability by checking the installed version of Samba and confirming if it is 1.9.17 or earlier.