CVE-2004-0883: Medium severity suse suse linux vulnerability
Multiple vulnerabilities in the samba filesystem (smbfs) in Linux kernel 2.4 and 2.6 allow remote samba servers to cause a denial of service (crash) or gain sensitive information from kernel memory via a samba server (1) returning more data than requested to the smbprocread function, (2) returning a data offset from outside the samba packet to the smbprocreadX function, (3) sending a certain TRANS2 fragmented packet to the smbreceivetrans2 function, (4) sending a samba packet with a certain header size to the smbprocreadXdata function, or (5) sending a certain packet based offset for the data in a packet to the smbreceivetrans2 function.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2004-0883?
CVE-2004-0883 has a moderate severity rating, as it can potentially lead to a denial of service and information disclosure from kernel memory.
How do I fix CVE-2004-0883?
To fix CVE-2004-0883, update the Linux kernel to a version that has patched this vulnerability.
Which versions of the Linux kernel are affected by CVE-2004-0883?
CVE-2004-0883 affects Linux kernel versions 2.4.x and 2.6.x prior to the patches.
What type of attacks can CVE-2004-0883 be exploited with?
CVE-2004-0883 can be exploited via specially crafted responses from a malicious Samba server.
Is CVE-2004-0883 targeted towards specific Linux distributions?
CVE-2004-0883 affects multiple Linux distributions that utilize the vulnerable versions of the kernel, including Red Hat, SUSE, and Ubuntu.