CVE-2008-1105
high · 7.5Heap-based buffer overflow in the receive_smb_raw function in util/sock.c in Samba 3.0.0 through 3.0.29 allows remote attackers to execute arbitrary code via a crafted SMB response.
7.5
CVSS
69.1%
EPSS (exploit prob.)
99th
EPSS percentile
2008-05-29
Published
AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-119
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| samba | samba | >= 3.0.0, <= 3.0.29 |
| canonical | ubuntu_linux | 6.06 |
| canonical | ubuntu_linux | 7.04 |
| canonical | ubuntu_linux | 7.10 |
| canonical | ubuntu_linux | 8.04 |
| debian | debian_linux | 4.0 |
Check a specific version with /api/v1/cve/match.
References
- http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html
- http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00000.html
- http://lists.vmware.com/pipermail/security-announce/2008/000023.html
- http://secunia.com/advisories/30228
- http://secunia.com/advisories/30385
- http://secunia.com/advisories/30396
- http://secunia.com/advisories/30442
- http://secunia.com/advisories/30449
- http://secunia.com/advisories/30478
- http://secunia.com/advisories/30489
- http://secunia.com/advisories/30543
- http://secunia.com/advisories/30736
- http://secunia.com/advisories/30802
- http://secunia.com/advisories/30835
- http://secunia.com/advisories/31246
- http://secunia.com/advisories/31911
- http://secunia.com/advisories/33696
- http://secunia.com/secunia_research/2008-20/advisory/
- http://security.gentoo.org/glsa/glsa-200805-23.xml
- http://securitytracker.com/id?1020123
- http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.473951
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-249086-1
- http://support.apple.com/kb/HT2163
- http://wiki.rpath.com/Advisories:rPSA-2008-0180
- http://www.debian.org/security/2008/dsa-1590
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2008-1105