CVE-2004-0082
First published: Wed Mar 03 2004(Updated: )
The mksmbpasswd shell script (mksmbpasswd.sh) in Samba 3.0.0 and 3.0.1, when creating an account but marking it as disabled, may overwrite the user password with an uninitialized buffer, which could enable the account with a more easily guessable password.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Samba | =3.0.0 | |
| Samba | =3.0.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.redhat.com/support/errata/RHSA-2004-064.html
- http://www.securityfocus.com/bid/9637
- http://us1.samba.org/samba/ftp/WHATSNEW-3.0.2a.txt
- http://www.vuxml.org/freebsd/3388eff9-5d6e-11d8-80e3-0020ed76ef5a.html
- http://www.ciac.org/ciac/bulletins/o-078.shtml
- http://www.osvdb.org/3919
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A827
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15132
Frequently Asked Questions
What is the severity of CVE-2004-0082?
CVE-2004-0082 is classified as a high severity vulnerability due to the potential for unauthorized account access.
How do I fix CVE-2004-0082?
To fix CVE-2004-0082, upgrade Samba to version 3.0.2 or later.
What software versions are affected by CVE-2004-0082?
CVE-2004-0082 affects Samba versions 3.0.0 and 3.0.1.
Can CVE-2004-0082 lead to account takeover?
Yes, CVE-2004-0082 can potentially enable account takeover by overwriting user passwords with easier-to-guess values.
Is CVE-2004-0082 specific to any operating system?
CVE-2004-0082 is primarily associated with Samba, which is cross-platform and can be used on various operating systems.
- agent/references
- agent/type
- agent/softwarecombine
- agent/remedy
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/last-modified-date
- agent/weakness
- agent/severity
- agent/description
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-historical
- vendor/samba
- canonical/samba
- version/samba/3.0.0
- version/samba/3.0.1