Evil-DB LogoEvil-DB
← All CVEs

CVE-2004-1154

high · 10

Integer overflow in the Samba daemon (smbd) in Samba 2.x and 3.0.x through 3.0.9 allows remote authenticated users to cause a denial of service (application crash) and possibly execute arbitrary code via a Samba request with a large number of security descriptors that triggers a heap-based buffer overflow.

10
CVSS
13.2%
EPSS (exploit prob.)
96th
EPSS percentile
2005-01-10
Published

AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected products

VendorProductAffected versions
sambasamba2.0.0
sambasamba2.0.1
sambasamba2.0.2
sambasamba2.0.3
sambasamba2.0.4
sambasamba2.0.5
sambasamba2.0.6
sambasamba2.0.7
sambasamba2.0.8
sambasamba2.0.9
sambasamba2.0.10
sambasamba2.2.0
sambasamba2.2.0a
sambasamba2.2.1a
sambasamba2.2.2
sambasamba2.2.3
sambasamba2.2.3a
sambasamba2.2.4
sambasamba2.2.5
sambasamba2.2.6
sambasamba2.2.7
sambasamba2.2.7a
sambasamba2.2.8
sambasamba2.2.8a
sambasamba2.2.9
sambasamba2.2.11
sambasamba2.2.12
sambasamba2.2a
sambasamba3.0.0
sambasamba3.0.1
sambasamba3.0.2
sambasamba3.0.2a
sambasamba3.0.3
sambasamba3.0.4
sambasamba3.0.4
sambasamba3.0.5
sambasamba3.0.6
sambasamba3.0.7
sambasamba3.0.8
sambasamba3.0.9

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2004-1154