Unscored severity · published Sep 13, 2004
CVE-2004-0807
Samba 3.0.6 and earlier allows remote attackers to cause a denial of service (infinite loop and memory exhaustion) via certain malformed requests that cause new processes to be…
–
CVSS
5.5%
EPSS
No
On KEV
Description
Samba 3.0.6 and earlier allows remote attackers to cause a denial of service (infinite loop and memory exhaustion) via certain malformed requests that cause new processes to be spawned and enter an infinite loop.
Exploitation
Is it being used?
Exploit prediction (EPSS)5.5% · higher than 93% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LI
Linux · Conectiva
9.0; 10.0 · source: NVD
ML
Mandrake Linux · Mandrakesoft
10.0; 10.0 · source: NVD
SA
Samba · Samba
3.0.0; 3.0.1; 3.0.2; 3.0.2a; 3.0.3; 3.0.4; +3 more · source: NVD
SL
Suse Linux · Suse
8; 8.1; 8.2; 9.0; 9.0; 9.0; +1 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-0807
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-0807
Patch
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000873
marc.info
http://marc.info/?l=bugtraq&m=109509335230495&w=2
marc.info
http://marc.info/?l=bugtraq&m=109526231623307&w=2
Patch
http://www.gentoo.org/security/en/glsa/glsa-200409-16.xml
Patch
http://www.idefense.com/application/poi/display?id=139&type=vulnerabilities
More from Linux
9.8
CVE-2002-0083
Off-by-one error in the channel code of OpenSSH 2.0 through 3.0.2 allows local users or remote malicious servers to gain privileges
–
CVE-2005-3626
Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (crash) via a crafted…
–
CVE-2005-3625
Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (infinite loop) via streams…
–
CVE-2005-3624
The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others allows attackers to corrupt the heap via…
–
CVE-2005-0207
Unknown vulnerability in Linux kernel 2.4.x, 2.5.x, and 2.6.x allows NFS clients to cause a denial of service via O_DIRECT