CVE Vulnerabilities

CVE-2004-0930

Published: Jan 27, 2005 | Modified: Oct 11, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:N/I:N/A:P
RedHat/V2
RedHat/V3
Ubuntu

The ms_fnmatch function in Samba 3.0.4 and 3.0.7 and possibly other versions allows remote authenticated users to cause a denial of service (CPU consumption) via a SAMBA request that contains multiple * (wildcard) characters.

Affected Software

Name Vendor Start Version End Version
Samba Samba 3.0.0 3.0.0
Samba Samba 3.0.3 3.0.3
Samba Samba 3.0.4 3.0.4
Samba Samba 3.0.5 3.0.5
Samba Samba 3.0.6 3.0.6
Samba Samba 3.0.7 3.0.7
Samba Sgi 3.0 3.0
Samba Sgi 3.0.1 3.0.1
Samba Sgi 3.0.2 3.0.2
Samba Sgi 3.0.3 3.0.3
Samba Sgi 3.0.4 3.0.4
Samba Sgi 3.0.5 3.0.5
Samba Sgi 3.0.6 3.0.6
Samba Sgi 3.0.7 3.0.7
Linux Conectiva 10.0 10.0
Red Hat Enterprise Linux 3 RedHat samba-0:3.0.7-1.3E.1 *
Samba Ubuntu devel *

References