SA
Product
samba
On CISA KEVExploited in the wildRansomware-linked
216
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 8High 41Medium 76Low 1
Watch
Add samba to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2003-0085 | – | Mar 31 | Buffer overflow in the SMB/CIFS packet fragment re-assembly code for SMB daemon (smbd) in Samba before 2.2.8, and Samba-TNG before 0.3.1, allows remote attackers to execute… Affected: 2.0.0; 2.0.1; 2.0.2; 2.0.3; 2.0.4; 2.0.5; +16 more |
| CVE-2003-0086 | – | Mar 31 | The code for writing reg files in Samba before 2.2.8 allows local users to overwrite arbitrary files via a race condition involving chown Affected: 2.0.0; 2.0.1; 2.0.2; 2.0.3; 2.0.4; 2.0.5; +16 more |
| CVE-2002-2196 | – | Dec 31 | Samba before 2.2.5 does not properly terminate the enum_csc_policy data structure, which may allow remote attackers to execute arbitrary code via a buffer overflow attack Affected: through 2.2.4; 1.9.17; 1.9.17; 1.9.17; 1.9.17; 1.9.17; +15 more |
| CVE-2002-1318 | – | Dec 11 | Buffer overflow in samba 2.2.2 through 2.2.6 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an encrypted password that causes the… Affected: 2.2.2; 2.2.3; 2.2.4; 2.2.5; 2.2.6 |
| CVE-2001-0406 | – | Jul 2 | Samba before 2.2.0 allows local attackers to overwrite arbitrary files via a symlink attack using (1) a printer queue query, (2) the more command in smbclient, or (3) the mput… Affected: through 2.0.7 |
| CVE-2001-1162 | – | Jun 23 | Directory traversal vulnerability in the %m macro in the smb.conf configuration file in Samba before 2.2.0a allows remote attackers to overwrite certain files via a Affected: 2.0.5; 2.0.6; 2.0.7; 2.0.8; 2.0.9; 2.2.0 |
| CVE-2000-0937 | – | Dec 19 | Samba Web Administration Tool (SWAT) in Samba 2.0.7 does not log login attempts in which the username is correct but the password is wrong, which allows remote attackers to… Affected: 2.0.7 |
| CVE-2000-0939 | – | Dec 19 | Samba Web Administration Tool (SWAT) in Samba 2.0.7 allows remote attackers to cause a denial of service by repeatedly submitting a nonstandard URL in the GET HTTP request and… Affected: 2.0.7 |
| CVE-2000-0938 | – | Dec 19 | Samba Web Administration Tool (SWAT) in Samba 2.0.7 supplies a different error message when a valid username is provided versus an invalid name, which allows remote attackers to… Affected: 2.0.7 |
| CVE-2000-0936 | – | Dec 19 | Samba Web Administration Tool (SWAT) in Samba 2.0.7 installs the cgi.log logging file with world readable permissions, which allows local users to read sensitive information such… Affected: 2.0.7 |
| CVE-2000-0935 | – | Dec 19 | Samba Web Administration Tool (SWAT) in Samba 2.0.7 allows local users to overwrite arbitrary files via a symlink attack on the cgi.log file Affected: 2.0.7 |
| CVE-1999-0812 | – | Jul 12 | Race condition in Samba smbmnt allows local users to mount file systems in arbitrary locations Affected: 2.0.5 |
| CVE-1999-0811 | – | Jul 21 | Buffer overflow in Samba smbd program via a malformed message command Affected: 2.0.4 |
| CVE-1999-0810 | – | Jul 21 | Denial of service in Samba NETBIOS name service daemon (nmbd) Affected: 2.0.5 |
| CVE-1999-1288 | – | Nov 19 | Samba 1.9.18 inadvertently includes a prototype application, wsmbconf, which is installed with incorrect permissions including the setgid bit, which allows local users to read and… Affected: 1.9.18 |
| CVE-1999-0182 | – | Sep 30 | Samba has a buffer overflow which allows a remote attacker to obtain root access by specifying a long password Affected: through 1.9.17 |