CVE-2004-0930: Medium severity Samba Samba vulnerability
The msfnmatch function in Samba 3.0.4 and 3.0.7 and possibly other versions allows remote authenticated users to cause a denial of service (CPU consumption) via a SAMBA request that contains multiple (wildcard) characters.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2004-0930?
CVE-2004-0930 has been classified as a denial of service vulnerability, which can lead to increased CPU consumption.
How do I fix CVE-2004-0930?
To fix CVE-2004-0930, you should upgrade Samba to the latest version that addresses this issue.
What versions of Samba are affected by CVE-2004-0930?
CVE-2004-0930 affects Samba versions 3.0.0 to 3.0.7 and potentially other versions in the 3.0.x series.
Can CVE-2004-0930 be exploited remotely?
Yes, CVE-2004-0930 can be exploited by remote authenticated users, which allows them to cause a denial of service.
What types of attacks are possible with CVE-2004-0930?
The main attack possible with CVE-2004-0930 involves sending specially crafted requests with multiple wildcard characters to exhaust CPU resources.