CVE-2004-0949: Medium severity SUSE SuSE Linux vulnerability

Published Dec 1, 2004
·
Updated

The smbrecvtrans2 function call in the samba filesystem (smbfs) in Linux kernel 2.4 and 2.6 does not properly handle the re-assembly of fragmented packets correctly, which could allow remote samba servers to (1) read arbitrary kernel information or (2) raise a counter value to an arbitrary number by sending the first part of the fragmented packet multiple times.

Affected Software

124 affected components
SUSE SuSE Linux=9.0
Linux Linux kernel=2.4.18-pre1
Linux Linux kernel=2.4.15
redhat Enterprise Linux=2.1
redhat Fedora Core=core_2.0
Linux Linux kernel=2.4.0-test1
Linux Linux kernel=2.6.5
Linux Linux kernel=2.4.11
Linux Linux kernel=2.6.1
Trustix Secure Linux=2.0
SUSE SuSE Linux=9.2
redhat Enterprise Linux Desktop=3.0
SUSE SuSE Linux=9.0
Linux Linux kernel=2.4.27-pre3
Linux Linux kernel=2.4.18-pre3
Ubuntu Ubuntu Linux=4.1
Linux Linux kernel=2.4.18-pre5
redhat Linux Advanced Workstation=2.1
Linux Linux kernel=2.4.26
Linux Linux kernel=2.4.0-test6
SUSE SuSE Linux=8.2
redhat Enterprise Linux=3.0
Linux Linux kernel=2.4.19-pre1
Linux Linux kernel=2.4.21-pre7
Linux Linux kernel=2.4.27-pre2
redhat Enterprise Linux=2.1
Linux Linux kernel=2.4.12
Linux Linux kernel=2.4.13
Linux Linux kernel=2.6.0-test5
SUSE SuSE Linux=8
Linux Linux kernel=2.4.19-pre4
Linux Linux kernel=2.6.3
SUSE SuSE Linux=1.0
Linux Linux kernel=2.6.0-test2
Linux Linux kernel=2.4.17
Linux Linux kernel=2.6.4
Linux Linux kernel=2.6_test9_cvs
Linux Linux kernel=2.4.21-pre1
redhat Enterprise Linux=2.1
Linux Linux kernel=2.6.7-rc1
Linux Linux kernel=2.4.21
Linux Linux kernel=2.4.23_ow2
SUSE SuSE Linux=9.0
Linux Linux kernel=2.4.23
Linux Linux kernel=2.6.2
Linux Linux kernel=2.6.8-rc1
Linux Linux kernel=2.6.0-test11
Linux Linux kernel=2.4.0-test3
Linux Linux kernel=2.4.7
Linux Linux kernel=2.6.1-rc2
Linux Linux kernel=2.4.25
Linux Linux kernel=2.6.8
Linux Linux kernel=2.4.0-test8
Linux Linux kernel=2.4.24
Linux Linux kernel=2.4.9
Linux Linux kernel=2.6.0-test1
Trustix Secure Linux=1.5
Linux Linux kernel=2.6.0-test6
Linux Linux kernel=2.4.23-pre9
Linux Linux kernel=2.4.0-test7
Linux Linux kernel=2.6.0-test4
Linux Linux kernel=2.6.0
Linux Linux kernel=2.4.24_ow1
Linux Linux kernel=2.4.18-pre4
Linux Linux kernel=2.4.19-pre6
Linux Linux kernel=2.4.10
Linux Linux kernel=2.4.0
Linux Linux kernel=2.4.2
Linux Linux kernel=2.4.19-pre2
Linux Linux kernel=2.4.0-test12
Linux Linux kernel=2.4.18-pre6
Linux Linux kernel=2.4.16
Linux Linux kernel=2.4.8
Linux Linux kernel=2.4.19-pre3
Linux Linux kernel=2.4.19
Linux Linux kernel=2.4.27-pre5
Linux Linux kernel=2.4.14
redhat Linux Advanced Workstation=2.1
Linux Linux kernel=2.6.0-test10
Linux Linux kernel=2.4.27-pre1
SUSE SuSE Linux=9.1
Linux Linux kernel=2.4.0-test2
Linux Linux kernel=2.4.18
Linux Linux kernel=2.6.0-test9
Linux Linux kernel=2.4.19-pre5
redhat Enterprise Linux=3.0
Linux Linux kernel=2.4.21-pre4
Linux Linux kernel=2.4.22
Linux Linux kernel=2.4.0-test5
Linux Linux kernel=2.4.5
redhat Enterprise Linux=2.1
Linux Linux kernel=2.6.7
Linux Linux kernel=2.6.1-rc1
Linux Linux kernel=2.4.18
Linux Linux kernel=2.6.6-rc1
Linux Linux kernel=2.4.27-pre4
Linux Linux kernel=2.6.9-2.6.20
Linux Linux kernel=2.4.3
redhat Enterprise Linux=3.0
redhat Enterprise Linux=2.1
Linux Linux kernel=2.4.1
Trustix Secure Linux=2.1
Linux Linux kernel=2.4.4
Linux Linux kernel=2.4.18-pre2
Linux Linux kernel=2.4.18-pre8
Linux Linux kernel=2.6.0-test7
Trustix Secure Linux=2.2
Linux Linux kernel=2.4.27
Linux Linux kernel=2.4.0-test11
redhat Fedora Core=core_3.0
Linux Linux kernel=2.4.6
Ubuntu Ubuntu Linux=4.1
Linux Linux kernel=2.4.0-test4
Linux Linux kernel=2.6.8-rc2
Linux Linux kernel=2.6.8-rc3
Linux Linux kernel=2.4.0-test10
Linux Linux kernel=2.4.20
Linux Linux kernel=2.4.0-test9
Linux Linux kernel=2.6.0-test8
Linux Linux kernel=2.4.18-pre7
SUSE SuSE Linux=8.1
redhat Enterprise Linux=2.1
Linux Linux kernel=2.6.6
Linux Linux kernel=2.6.0-test3

Remediation

Patch Available

http://www.redhat.com/support/errata/RHSA-2004-537.html

Patch Available

http://www.securityfocus.com/bid/11695

Event History

Dec 1, 2004
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description

Frequently Asked Questions

1

What is the severity of CVE-2004-0949?

CVE-2004-0949 is classified as a medium severity vulnerability that could lead to information disclosure or arbitrary counter manipulation.

2

How do I fix CVE-2004-0949?

To fix CVE-2004-0949, upgrade the affected Linux kernel versions to 2.4.28 or later.

3

What systems are affected by CVE-2004-0949?

CVE-2004-0949 affects Linux kernel versions 2.4 and 2.6, specifically various test and release versions.

4

What impact does CVE-2004-0949 have on system security?

CVE-2004-0949 can potentially allow remote samba servers to read sensitive kernel information or manipulate system counters.

5

Is CVE-2004-0949 a common vulnerability?

Yes, CVE-2004-0949 is part of the widely used Linux kernel, making it a common concern in various Linux-based systems.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203