CVE-2004-2546: Medium severity Samba Samba vulnerability
Published Dec 31, 2004
·Updated
Multiple memory leaks in Samba before 3.0.6 allow attackers to cause a denial of service (memory consumption).
Affected Software
37 affected components
Samba Samba=2.2.1a
Samba Samba=3.0.3
Samba Samba=2.2.12
Samba Samba=2.2.3a
Samba Samba=1.9.18-p2
Samba Samba=3.0.2a
Samba Samba=3.0.5
Samba Samba=1.9.17-p5
Samba Samba=1.9.18-p1
Samba Samba=2.2.8a
Samba Samba=1.9.18-p4
Samba Samba=1.9.17-p1
Samba Samba=1.9.18-p10
Samba Samba=3.0.4-rc1
Samba Samba=1.9.17
Samba Samba=2.2.9
Samba Samba=3.0.0
Samba Samba=2.2.11
Samba Samba=1.9.18-p3
Samba Samba=2.2.1
Samba Samba=1.9.18-p8
Samba Samba=2.2.7a
Samba Samba=2.0
Samba Samba=1.9.18-p6
Samba Samba=1.9.18-p7
Samba Samba=2.2a
Samba Samba=3.0.2
Samba Samba=1.9.17-p3
Samba Samba=2.0.5a
Samba Samba=2.2.10
Samba Samba=2.0.0
Samba Samba=1.9.18-p5
Samba Samba=1.9.17-p4
Samba Samba=3.0.4
Samba Samba=3.0.1
Trustix Secure Linux=2.0
Trustix Secure Linux=2.1
Event History
Dec 31, 2004
CVE Published
05:00 AM
Nov 21, 2005
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-2546?
CVE-2004-2546 is classified as a denial of service vulnerability affecting multiple versions of Samba.
2
How do I fix CVE-2004-2546?
To mitigate CVE-2004-2546, upgrade to Samba version 3.0.6 or later.
3
Which versions of Samba are affected by CVE-2004-2546?
CVE-2004-2546 affects several versions of Samba, including 1.9.17, 1.9.18, and 2.x versions up to 3.0.5.
4
What type of attack can be executed due to CVE-2004-2546?
The vulnerability allows attackers to exploit memory leaks, resulting in denial of service through excessive memory consumption.
5
Is there a workaround for CVE-2004-2546 if I can't update?
In the absence of an update, the best workaround is to monitor and limit the use of Samba services to mitigate potential attacks.