CVE-2004-0082: High severity Samba Samba vulnerability
Published Mar 3, 2004
·Updated
The mksmbpasswd shell script (mksmbpasswd.sh) in Samba 3.0.0 and 3.0.1, when creating an account but marking it as disabled, may overwrite the user password with an uninitialized buffer, which could enable the account with a more easily guessable password.
Affected Software
2 affected components
Samba Samba=3.0.0
Samba Samba=3.0.1
Remediation
Patch Available
Patch Available
Event History
Mar 3, 2004
CVE Published
05:00 AM
Sep 1, 2004
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-0082?
CVE-2004-0082 is classified as a high severity vulnerability due to the potential for unauthorized account access.
2
How do I fix CVE-2004-0082?
To fix CVE-2004-0082, upgrade Samba to version 3.0.2 or later.
3
What software versions are affected by CVE-2004-0082?
CVE-2004-0082 affects Samba versions 3.0.0 and 3.0.1.
4
Can CVE-2004-0082 lead to account takeover?
Yes, CVE-2004-0082 can potentially enable account takeover by overwriting user passwords with easier-to-guess values.
5
Is CVE-2004-0082 specific to any operating system?
CVE-2004-0082 is primarily associated with Samba, which is cross-platform and can be used on various operating systems.