Detections
Analytics
Samba < 3.0.8 Remote Wild Card DoS and QFILEPATHINFO Remote Overflow
high Nessus Network Monitor Plugin ID 2397
Synopsis
The remote host is vulnerable to a buffer overflow.Description
The remote Samba server, according to its version number, may be vulnerable to a remote Denial Of Service vulnerability and a remote buffer overflow.The Wild Card DoS vulnerability may allow an attacker to make the remote server consume excessive CPU cycles.
The QFILEPATHINFO remote buffer overflow vulnerability may allow an attacker to execute code on the server.
An attacker needs credentials to exploit those flaws.
Solution
Upgrade to Samba 3.0.8 or higher.See Also
Plugin Details
Severity: High
ID: 2397
Family: Samba
Published: 11/10/2004
Updated: 3/6/2019
Risk Information
VPR
Risk Factor: Medium
Score: 5.8
CVSS v2
Risk Factor: High
Base Score: 8.3
Temporal Score: 6.1
Vector: CVSS2#AV:A/AC:L/Au:N/C:C/I:C/A:C
CVSS v3
Risk Factor: High
Base Score: 8.8
Temporal Score: 7.7
Vector: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
CPE: cpe:/a:samba:samba
Patch Publication Date: 1/27/2005
Vulnerability Publication Date: 1/27/2005
Reference Information
CVE: CVE-2004-0882, CVE-2004-0883, CVE-2004-0930, CVE-2004-0949