CVE-2004-0883
- State
- Published
- Severity
- Not scored
- Published
- Dec 1, 2004
- Updated
- Aug 8, 2024
- Reserved
- Sep 22, 2004
Description
Multiple vulnerabilities in the samba filesystem (smbfs) in Linux kernel 2.4 and 2.6 allow remote samba servers to cause a denial of service (crash) or gain sensitive information from kernel memory via a samba server (1) returning more data than requested to the smb_proc_read function, (2) returning a data offset from outside the samba packet to the smb_proc_readX function, (3) sending a certain TRANS2 fragmented packet to the smb_receive_trans2 function, (4) sending a samba packet with a certain header size to the smb_proc_readX_data function, or (5) sending a certain packet based offset for the data in a packet to the smb_receive_trans2 function.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 20163third-party-advisory
- 11695vdb-entry
- DSA-1082vendor-advisory
- MDKSA-2005:022vendor-advisory
- 20041117 Advisory 14/2004: Linux 2.x smbfs multiple remote vulnerabilitiesmailing-list
- FLSA:2336vendor-advisory
- oval:org.mitre.oval:def:10330vdb-entrysignature
- linux-smbreceivetrans2-dos(18136)vdb-entry
- http://security.e-matters.de/advisories/142004.html
- DSA-1070vendor-advisory
- RHSA-2004:537vendor-advisory
- 20162third-party-advisory
- VU#726198third-party-advisory
- DSA-1067vendor-advisory
- DSA-1069vendor-advisory
- linux-smbprocreadxdata-dos(18135)vdb-entry
- RHSA-2004:505vendor-advisory
- linux-smb-response-dos(18134)vdb-entry
- 20202third-party-advisory
- RHSA-2004:504vendor-advisory
- 20041118 [USN-30-1] Linux kernel vulnerabilitiesmailing-list
- 13232third-party-advisory
- 20338third-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.