CVE-2008-1105: Buffer Overflow
Published May 29, 2008
·Updated
Heap-based buffer overflow in the receivesmbraw function in util/sock.c in Samba 3.0.0 through 3.0.29 allows remote attackers to execute arbitrary code via a crafted SMB response.
Affected Software
6 affected components
Samba Samba>=3.0.0<=3.0.29
Canonical Ubuntu Linux=7.04
Canonical Ubuntu Linux=7.10
Canonical Ubuntu Linux=8.04
Canonical Ubuntu Linux=6.06
Debian Debian Linux=4.0
Remediation
Patch Available
Event History
May 29, 2008
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-1105?
CVE-2008-1105 has a high severity rating due to its potential for remote code execution.
2
How do I fix CVE-2008-1105?
To fix CVE-2008-1105, upgrade Samba to a version above 3.0.29 or apply the appropriate security patches.
3
Which versions of Samba are affected by CVE-2008-1105?
CVE-2008-1105 affects Samba versions from 3.0.0 to 3.0.29.
4
Can CVE-2008-1105 be exploited remotely?
Yes, CVE-2008-1105 can be exploited remotely by sending a crafted SMB response to the affected Samba server.
5
What systems are vulnerable to CVE-2008-1105?
Systems running affected versions of Samba, including various Ubuntu and Debian Linux distributions, are vulnerable to CVE-2008-1105.