CVE-2004-0882: Buffer Overflow
Published Nov 19, 2004
·Updated
Buffer overflow in the QFILEPATHINFO request handler in Samba 3.0.x through 3.0.7 may allow remote attackers to execute arbitrary code via a TRANSACT2QFILEPATHINFO request with a small "maximum data bytes" value.
Affected Software
27 affected components
Samba Samba=3.0.0
Samba Samba=3.0.1
Samba Samba=3.0.2
Samba Samba=3.0.2a
Samba Samba=3.0.3
Samba Samba=3.0.4
Samba Samba=3.0.4-rc1
Samba Samba=3.0.5
Samba Samba=3.0.6
Samba Samba=3.0.7
Conectiva Linux=10.0
redhat Enterprise Linux=2.1
redhat Enterprise Linux=2.1
redhat Enterprise Linux=2.1
redhat Enterprise Linux=2.1
redhat Enterprise Linux=2.1
redhat Enterprise Linux=2.1
redhat Enterprise Linux=3.0
redhat Enterprise Linux=3.0
redhat Enterprise Linux=3.0
redhat Enterprise Linux Desktop=3.0
redhat Fedora Core=core_2.0
redhat Fedora Core=core_3.0
redhat Linux Advanced Workstation=2.1
redhat Linux Advanced Workstation=2.1
Ubuntu Ubuntu Linux=4.1
Ubuntu Ubuntu Linux=4.1
Remediation
Patch Available
Event History
Nov 19, 2004
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-0882?
CVE-2004-0882 is considered to have a high severity due to the potential for remote code execution.
2
How do I fix CVE-2004-0882?
To fix CVE-2004-0882, upgrade Samba to version 3.0.8 or later, which resolves the buffer overflow vulnerability.
3
Which versions of Samba are affected by CVE-2004-0882?
CVE-2004-0882 affects Samba versions 3.0.0 through 3.0.7.
4
What types of attacks can exploit CVE-2004-0882?
CVE-2004-0882 can be exploited via specially crafted TRANSACT2_QFILEPATHINFO requests that induce a buffer overflow.
5
Is there a workaround for CVE-2004-0882?
A potential workaround for CVE-2004-0882 is to restrict access to the Samba service until a patch is applied.