CVE-2004-1154 in Samba
Summary
Integer overflow in the Samba daemon (smbd) in Samba 2.x and 3.0.x through 3.0.9 allows remote authenticated users to cause a denial of service (application crash) and possibly execute arbitrary code via a Samba request with a large number of security descriptors that triggers a heap-based buffer overflow.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Reservation
12/07/2004
Disclosure
01/10/2005
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 1066 | GNU Samba smbd Security Descriptor heap-based overflow | 122 | Proof-of-Concept | Official fix | CVE-2004-1154 |